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Excellent job | [ four engineers are ahead of schedule. I don't want to press vou but please let me know when you 
think you willTSS prepared to provide assistance to DEA with their ongoing} Intercepts. 


FYl J l ust called to inform me that the New Yor k state Polina inyrp^ have a Title III court order for a 

broadband phone in a drug case. The cable compa ny i l ll Is assisting with the interception 

through former CIU contract pmolp ve eT I The collection box company jie NYSP expect to have 

the intercept up this Mondav JW fill provide us with updates next week. 1 1 


— Original Message — 

From: CLIFFORD, MICHAEL (£R) (FBI) 
Sent: Friday. May 14. 2004 4:15 PM 
- ■ lrPD\ rran 



}eR)(FBI)£ 


lb 2 
b6 
b7C 
fc7E 


UNCLASSIFIED 

NON-RECORD 


o 


Michael P. Clifford, Jr. 

Section Chief 
Electronic Surveillance Technology Section 
Inve stigative Tec hnology Division 
( 703 £ 



b7C 
Sb7E I 


^ |( ER) (FBI); CUFFORD, MICHAEL (ER) (FBI)| 

kER) (FBn 


](ER)(FBI)£ 


UNCLASSIFIED 

NON-RECORD 


Gentlemen, 

I thought you might be interested to know that we have successfully intercepted d 
phone in real-time with our DC S 3000 system. The results are better than expect 
schedule r h as not yet fully deployed the solution throughout their network, but it should not 

be too much longer. 


□ 
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UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


From: 

Sent: 

To: 

Cc: 

Subject: 


HOTD) (FBI) 


H(OGC) (FBI) 


Fririaw Alim ict 1 A ? nnfi 3 35 PM 

■I . -lOOC) (FBI) _ 

. Iott ™ (FBI);[_ 

I | OTD) (FBI) 

RE: Post-Cut-Though-Dialed Digits 


]{OTD) (FBI j I 


SECRET 

RECORD 66F-HQ-A1 247863 


I was under the impression from I l that.DCS3QQ0 itself does keep all data in an administratively acce ssed fil e used for 
debugging, including PCTDD even when the default of do not record is selected. I thought I understoond Ito say that 
that file is overwritten over time, but otherwise, if the do not record default remains unchanged, the PCT PD uife s not go to 
TA or anywhere else. , 

~l « 

Is this not correct? 

PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT PRIOR OGC 
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Associate General counsel - unit cK 
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Science & Technology Law Unit 
Engineering Research Facility 
Bldg 27958A, Room A-207 
Quanttco, VA 22135 
Tel. 703] | 

Fax. 703 



Sent: 

To: 

Cc: 


Subject 


IjOGC) (FBI) 


?nns i -ni pm 

|(OGQ (FBI) 


‘ Hfc: Most-Cut- 1 hotig f HJl aled Digits 


□3T3j(FBD' ' 
Elalec - ‘ 


SECRET 


394 


o 


9 


□ 

When DSC 3000 is used for a FISA collection, doesn't the DCS 3000 pass all to thel (DSC 5000) including the 
PCTTD -in other words for FISAs the DCS3000 does NOT use the default of not reflCOlTTg the PCTTD???? I might 
have this incorrect, but I thought there were some differences. 



FYI. 

Since OTD only acquires the information and passes it along, and since the determination on whether one set of 
PCTDDs is content and not addressing, routing, dialing or signaling can only be made at the field office or analyst 
level, there really is nothing technologically speaking that can be done to ensure that content determined PCTDD 
is not used for investigative purposes. 

However, OTD and STLU is proposing to amend the FD 871 which is required to be signed to authorize tech 
agents to implement a criminal or FISA PR to add a selection box requesting that PCTDD be recorded. That box 
will have an asterisk which near the signature line will alert approval signatories that "If Post Cut Through Dialed 
Digit (PCTDD) recording is required, approving authorities are certifying that they have read and will ensure 
compliance with the DOJ Deputy Attorney General’s policy directive of May 24, 2004 prohibiting any investigative 
use of PCTDDs that are determined to qualify as content of communications." In this way, there will at least be a 
record with a staff level supervisor, and ASAC acknowledging the DAG Directive each and every time they 
approve a pen register. In the absence of the box being checked, the DCS 3000 default of not recording PCTDDs 
will remain unchanged (although we still have the problem of non CALEA compliant provider networks were we 
cannot use the DCS 3000 and have to use older PR decoders that do not have the same ability to shut off 
recording of PCTDDs). 

Please advise if you see any problems with this approach. 

PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT PRIOR 
OGC APPROVAL 


b6 
fe7C 

Science & Technology Law Unit 
Engineering Research Facility 
Bldg 27958A, Room A-207 
Quantic o, VA 22135 
Tel. 703| I 

Fax. 70q I 
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9 sEesfet 


Cc: I I (QGO f FBI] l (OGC) (FBI);[ 

(OGC) (FBI) 

Subject: Post-Cut-Though-Dialed Digits 

Importance: High 


RECORD_6 6F-H 0^12478 6 3 


JOGC) (FBI); CAPRONI, VALERIE E. 


INr J I Docket Number PR/TT 06-102 

I just received a supplemental order from Judge Kotelly. The order is dated August 7. 

Judge Kotelly has ordered the FBI to submit a report no later than September 25. This report must contain; 

(1) an explanation of how the FBI is implementing its obligation to make no affirmative investigative use, 
through pen register authorisation, of post-cut-through digits that do not constitute call dialing, routing, 
addressing or signaling information, except in a rare case in order to prevent an immediate danger of death, 
serious physical injury or harm to the National Security, addressing in particular a) whether post-cut-through be 
digits obtained via FISA pen register surveillance are uploaded into TA, Proton, IDW, EDMS, TED, or any b7c 
other FBI system; and b) if so what procedures are in place to ensure that no affirmative investigative use is 

made of post-cut-through digits that do not constitute call dialing, routing, addressing or signaling information, 
including whether such procedures mandate that this information be deleted from the relevant system. 

(2) an explanation of what procedures are in place to ensure that the Court is notified, as required pursuant to 
the Court's Order in the above captioned matter, whenever the government decides to make affirmative 
investigative use of post-cut-through digits that do not constitute call dialing, routing, addressing or signaling 
information in order to prevent an immediate danger of death, serious physical injury, or harm to the national 
security. 


You are in the building. Could you pick up copies of the order from me for STLU. 


Unit Chief 

National Security Law Policy and Training Unit 
FBI HQ Roo m 7975 
STU III: (202) 1 
Unclassified Fa x: (202 
Secure Fax: (202| 




SECRET 
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Doj is due here at ERF between 10AM to 10:30. We can come over to your location. 

PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT PRIOR OGC 
APPROVAL 


Associate General Counsel - Unit Chief 

Science & Technology Law Unit 

Engineering Research Facility 

Bldg 27958A, Room A-207 

Quantico, VA 22135 

Tel. 703| I 

Fax. 70q I 


From: I 1 Ir otm (FBI) 

Sent: 

To: 

Subject: 

UNCLASSIFIED 
NON-RECORD 


Sure. Where do you plan to meet? 

□ 


Subject: PCTDD -- DCS 300 


](0TO) (FBI) _ 

gOTDl fFBH: CLI FFORD. MICHAEL (OTO) (FBI); I 

(OGC) (FBI)| “jOGQ (FBI) 


UNCLASSIFIED 

NON-RECORD 


] (OGC) (FBI); C 


b6 

b7C 


Will you or someone from your shop be around Tuesday mid morning (10:30 AM), August 8th to provide me and a 
couple of DOJ attorneys a quick presentations on the capabilites and limitations of DCS3000 to restrict PCTDDs. 

397 

^QQLS. 

'll L1HLJL 


We are struggling to come up with a strategy of dealing with the recent Texas Magistrate's ruling that law 
enforcement cannot collect any PCTDDs unless they utilize some technology so as to limit the collection of 
content 



□ 

Will you or someone from your shop be around Tuesday mid morning (10:30 AM), August 8th to provide me and a couple 
of DOJ attorneys a quick presentations on the capabilites and limitations of DCS3000 to restrict PCTDDs. We are 
struggling to come up with a strategy of dealing with the recent Texas Magistrate's ruling that law enforcement cannot 
collect any PCTDDs unless they utilize some technology so as to limit the collection of content 


BTVd | j vi 


rill be visiting in the FishBowl T uesday afternoon to give a presentation on[ 


UNCLASSIFIED 
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Subject* DTP Spend Plan 


UNCLASSIFIED 

NON-RECORD 


I guess I'm on the hook for the DTP Spend Plan sinc< 
the "pony"? 


b out of the office. Can you send me 5 -, 6 


UNCLASSIFIED 

NON-RECORO 


|OTD) (CON) 

(FBI) 

FW: Chicago new building 


Any idea on whom this request/inquiry should be forward to? 

— O riginal Message — 

Fromi l E G' (FBI) 

Se nt; Thursday. Nove mber 10, 2005 1:53 PM 

tqJ Form (con) , 

q P3) (FBI);| |(OTD)(CON) 

S ubject: Chicago new buildifl g 1 




UNCLASSIFIED 

NON-RECORD 


Wa am rryakmg our plans to move into our new Chicago Office in April of 20Qf 
group) and they are supplying workstations for our Voice Box anc| 
itations" are basically a l l ivide work table with shelf for the VB o 


.been working wittL 


Llent terminals in our T-3 rooms, 
client computer to sit on so an 


□ 


ine'worksl . 

Agent or LS can sit and monitor the T-3 or FISA. They tell me that they have not planned to supply work stations f or 
DCS3000 terminals. Every T-3 room in Chicago has two DCS3000 terminals for live pen monitoring and |[ ' *1 

information. Does your group have a facilities person or budget to supply workstations to support the DCS300U terminals? 
Can you recommend someone from your group that would be the appropriate contact person for me? 


Sincerely* 


] 


Technically Trained Agent, 
Chi cago Divisi on 
312\ \mce 
312\ Yell 


b2 ■ 

lb 6 I 
fo7cl 
to7E I 


UNCLASSIFIED 

UNCLASSIFIED 


[ZZ 

From; 

Sent: 

To: 

Cc: 

Subject: 


JOTD) (FBI) 


Harris Testing at ERF 


UlOTD) (FBI) 

0055:57 PM 

. I OTP) (FBI)|— 

](OTD) (FBI) 


J(OTD) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


to 70 
to7E 


I'll bring Harris up to your lab on Tuesday, November 15th 2005. 

J>hone that I would like to get up on the "pen". 


a the information 

PH: (703 1 1 

Name on Account: Enr' 
ATT! 


Account 


sp 


irinn Pccaarrh Facility 


We'll probably setup in i l office since it's near the window, and have to have someone watching the pen in your la b. 

a s should take approximately till lunch time. Afterwards, Ham's needs a dermasicafion of the van integration or DCS I I 
application. TheVre build ing something for us that should interface with the l l outout of the D CS3QnO machi nes, 
hoping to get | t here to demonstrate it I was also hoping that they could see some of the | j stuff 
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](OTD) (FBI) 


To: 

Cc: 


Subject: 



t RoTb) ( FBf )L_ IT OTO) (CON) 

NBA/ CBT training available - Switch Based Intercepts using DCS 3000 


i >TD) (FBI)C 
jTOTD) (( 


UNCLASSIFIED 

NON-RECORD 

□ 

TICTU has some newly developed training to make available to the field TTA’s. We can provide a copy to you guys at 
TPDU for review and comment The following is requested to be sent out to the field for notification: 

The Telecommunications Intercept and Collection Technology Unit is pleased to announce the release of a computer- 
based training course entitled, "Switch Based Intercpets using DCS 3000." This training focuses on an FBI software 
application used to conduct CALEA based intercepts. The course is designed for Tehriically-Trained Agents and 
covers the installation, configuration and use of the DCS 3000 suite of applications. The instructional material is 
provided on a CD and the entire course is designed to be completed in approximately four (4) hours. 

I at (703 CD r via a Triology e- 


Ihft 

b7C 


To take advantage of this new resource, please contact^ 


Th^ n KS,. 




Crirlgw 

I 3n/ I (ITD) (FBI) 

I l(WF) (FBI) 

RE: Cell Timing in DCS3000 


lor 21:57 shows up on toll records as 21:58:01 61 
’fence) 


illing our subject at 703-|_ 


Ex. on 12/10/2004 703 


B 12:10 calls a A individual, on toil records the call is at 12:03:57 and last 1 min 


Plus around this time he calls his voice message system three times at 12:05:54, 12:03:34, 12:03:31 (his other cell). 
Luckly we know that the number has to be the call at 12:03:57 but what if its off, he's just leaving a message. 


03 j [ alls 


s at 15.48 and on toll records its at 15:49:08. 


The problem is if l get a whole bunch of short calls Around the same time then I can't determine who is calling at that exact 
time. These are a few small examples. I will go through and find out some others and send them along when I see them. 


From ! | (WF) (FBI) 

S ent 1 : Friday, laniiarv 78 7(lfis 1 1 :4ft AM 
To d I WFVFBD 

Subject: FW: Cell Timing in DCS3000 


UNCLASSIFIED 

NON-RECORD 


needs dates and times. Also include the date and time 


I (FTD) (FBI) 
iarv 700 5 11:42 AM 
t WF) (FBI) 
Timing in DCS3000 


UNCLASSIFIED 

NON-RECORD 


in our | ~~[s y 


- EiCC R E t 

1 =] 

[ checked the pen data for this target. A!! of the target’s calls were made in 
theory is out If the case agent has specific examples (dates and times) of 
them to me. 



From: I | (WF) (FBI) 

Se nt; Friday. jaHUaiV 2M. 2P D? 11:27 AM 
Toi l I (ITD) (FBI) 

Subject: Cell Timing in DCS3000 


switch. So, the time-zone 
ences" In times, please pass 


fe .2 


fc6 

b7C 

b7E 
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Hi, 

Thanks for calling me back. 

The number is 703 j fc arrier 



UNCLASSIFIED 


UNCL ASSIFIED 


UNCLASSIFIED 



Foreit 


Counterlntellk 


Investigations 


From: 

Sent: 

To: 

Subject: 


J(OTD) (FBI) 

'i3PM 

, J(OTO) (FBI) 

FW: Urgent request-DAG short-fused PIA tasking 


Importance: High 


unclassified 

NON-RECORD 


fob 

fc7C 


□ 



'OTD)|FRnl. Iff 


|(OTD)TPBir 


JOHW (OGA)f 
IOTD) (FB 


UNCLASSIFIED 

NON-RECORD 


To all, 

This is a very short deadline request for information. I think I hit all the proper POCs and there management. 
Please note the first deadline to OGC is this Friday 6/9. 


— -Original Message — 

From: THOMAS, MARCUS C (OTD) (FBI) 

Sent: Mnnriau luncns Tnnf, 4: 19 PM 

To: L HlTTmUFBI) 

Cc 1 IOTD) (FBI) 

Subject: FW: Urgent request-DAG short-fused PIA tasking 

Importance: High 

UNCLASSIFIED 

NON-RECORO 


IZ=] 

Please forward this to the right people in OTD to handle. New Privacy Office j J rill coordinate. 

Marcus 


to 6 
b7C 


ID) (FBI) 

SQfi 4:09 PM — 
_pTD) (FBI)J 


FW: Urgent request-DAG short-fused PIA tasking 
High 


3oto) (FBI)£ 


](OTD) (FBI) 


407 


© 


From: \ 

|( S£ ) ( FB| ) 

Sent: Z 

ruesdav June 97 ft ps AM 

To: L 

l(OTD) (FBI) 

Cc: L 

1 (SE) (CON) 


RE: TICTU Computer Based Training 


UNCLASSIFIED 

NON-RECORD 


and I are interested in participating in the beta testing for the DCS 3000. 



— Original Message 

From: I 

Sent: Monday. Jum 


UNCLASSIFIED 

NON-RECORD 


J(SE) (CON) 

2^6 5:20 PM 
|(SE) (FBI) 
CSTBased Training 


Have you seen this yet??? I figured that we both could try this but I did not want to answer for you, but if you want send 
back a yes for both of us 


Seattle Tech Squad 

ELSUR Technology Management Unit (ETMU) 
Electronic Surveillance Technology Section (ESTS) 
Ooerational Technology Division (OTD) 

2061 — tDesk) 

206 [Cell) 

206 Pax) 


— Original Mi 

From: f I (OTD) (FBI) 

Sent: mursaav. June n. yn BS I2 :3fl PM 

Cc: . I lira™ (CON)f 

Subject: 71CTU Computer Basel Training L 

UNCLASSIFIED 

NON-RECORD 


TICTU Customer, 

The TICTU has created a computer-based training course forTTAs and CMP technical staff. The course, entitled 


410 



Switch-Based Intercepts using DCS 3000, provides background information on the technology used to conduct CALEA 
based intercepts as well as basic information on how to use the DCS 3000 suite of applications. 


TICTU needs your help! TICTU needs to conduct a beta test and review before releasing the course to the entire 
CMP community. To this end, we ask you to help us evaluate the training. If you agree, we will mail you a CD with the 
training course and instructions. Ail we ask is you review the material and fill of the evaluation form. TICTU would like 
to release this training to the field as soon as possible. If you can, please submit your evaluation form by Friday, July 

If you are unavailable to review this c ourse, please ter us know. Questions concerning this course review can be 
directed \< \ | at (703 ] | 

Thank you for your help ensuring that we produce a quality training product. 

Thanks, 









Thanks in advance. 




1:45-2:15 DCS3000 
2:15-2:45 | 1 

2:45-3:00 Break 
3:00-3:30 DCS5000 
3:30-4:00 DCS6000 


I has done this for us previously. Please contact me at your convenience to discuss. Thanks 

^gami 1 


fo2 

fo7E 


b6 

b7C 



lance Operations Support Office (EOSO) 


3 


UNCLASSIFIED 




From: 

Sent: 

To: 

Cc: 

Subject: 


]SecD)(CON) 

ZZZJcDKCOI^- 


DTD) (FBIJ_ 


3 (SecD) (FBI)Q 


FW: Ucs 3000 TEST at Quantico 


UNCLASSIFIED 

NON-RECORD 


Cl 


Jom ESOC test group will test DCS 3000 tomorrow for us at quantico. 


Information Assurance Analyst 
SecD/lAS/CU (Certification Unit) 

T-nrtifiratinn loart Tram 

Phone: < 2021 I 

Fax: (20d I 


h6 

hlC 


FW: Dcs 3000 RMM 


(SecDJ(CON) 

'2006 3: 35 PM 

J(SecD) (CON) 


UNCLASSIFIED 

NON-RECORD 


Here is thanks a lot. 


414 
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^OTD) (FBI) 


Sent: Friday. Sep 


. 2006 11:07 AM 

b2 

To: f 


|(OTD) (FBI) 


Subject: i-w: dus -2 

iOUO to EU 

MS Schema 

hlC 

b7E 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 






Attached is the first draft of the schema to be used for sending data from DCS-3000 to EDMS. Please review it and 
provide comments. 




DCS3K_XMLSchema 
-xsd (8 KB) 



ELSUR Technology Management Unit 
Electronic Surveillance Technology Section, OTD 


SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
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From: 

Sent: 

To: 

Subject: 


RE: Brief Question 


JOGC) (FBI) 
fe 4:01 P M 


(OTD) (FBI) 


SECRET 

RECORD OIPR 0001 


thanks-nothings ever simpfe- 

linal Message — 


Subject: RE: Brief Question 


RECORD OIPR 0001 






We can bl ock the info rmation on the DCS 3000 - there's a check box the tech agent must select to display and 
capture th ^ ^ The other systems cannot. 

□ 


Subject: FW: Brief Question 

Importance: High 


fo2 

b7E 


SECRET 

RECORD OIPR 0001 




SBZ<$ET 

RECORD OIPR 0001 
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jSE&RU] 


DERIVED FROM: Multiple Sources 
DECLASSWnfeATION EXEMPTION 1 


From: 

Sent: 

To: 

Subject: 


I (OTP) (FBI) 


JpGCj (FBI) 

^TD) (FBI) 


Importance: High 


SECRET 

RECORD OIPR 0001 


Ihb 

1L7C 


Thanks-if there’s a full-content fisa surveillance order served on a provider, does the provider send the CCC and CDC or 
only the CCC unless the order specially also orders deliver of the PRm or associated data? OR is the answer-it 
depends on the provider— Some carriers will provide it along with everything else, while others will stipulate that the order 
must contain specific text identifying location as required..? 


— Original Message- 


Seni 

To:[ 


rrrdav.Julv2i. M3: 

□ (OGC) (FBI) 


Subject: RE: Brief Question 


•CORD OIPR 0001 


b£ 

fo7E 


W e can block the information on the DCS 3000 - there's a check box the tech agent must select to display and capture 
th fl |~ he other systems cannot. 


□ 


— Or iginal Message — 

From:| | (OGC) (FBI) 

Se nt; Friday. July 21. 2006 1 2:35 PM 
To :l I (OTD) (FBI) 

Subject: FW: Brief Question 
Importance: High 


SEgtfET 

RECO RD OIPR 0001 


1=1 
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= S L6B U L 


what's the answer? can we at the collection end tell the equipment NOT to receive the cell site location 
information? 


Another related concern is whether if the field has ONLY a PR/TT orders (no 2703(d)) authority but the provider 
send the cellsite location data along with the PR/TT data-do we get it all or can we, when required, tell the 
equipment to not collect the cell site location data? 



□ 

I am one of the OIPR attorneys working on the | p rief and was at the presentation ERF gave 

to OIPR about cell site location information several months ago. 



Thank you, both for your assistance with this inquiry and for all your help over the past few months with this topic. 





As to legal issues : the central concern is ensuring that what is being recorded is limited to that which the cooperating or 
consenting person is a party- the technical means described is of no consequence. Is the transmitter phone being worn 
or concealed ON the consenting or cooperating person? 


Your thoughts/concems? 


Thanks 

— Origin; 


ioinal Messanp — 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


hCZD 

Have you had any dealings/issues w 
See you Tuesday. 


i the technique TT/T 


__Jis describing below? 




As I understand the PR/TT data comes into the field office DCS3000, field office agent/analysts/ELSUR tech is responsible 
for making the removable download and sneaker-netting to upload into TA -BUT the data is still stored in a backup 
directory in the DCS3000 at the field office. 


nd he will help retrieve the data. 


PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT PRIOR OGC 
APPROVAL 



Science & Technology Law Unit 
Engineering Research Facility 
Bldg. 27958A Room A-207B 
Quantico. Va. 22135 


SCIENCE & TECHNOLOGY LAW UNIT - OFFICE OF THE GENERAL COUNSEL 



Subject: RE: Pen register discovery question 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Interesting question. Let me check with ERF. I thought that our devices kept a raw data file on the system, but 

ill look into this with our telephone group. I will be up your way over the weekend and will try to follow up. 

PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT PRIOR OGC 
APPROVAL 

I 
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SECRET - 

record] 


I I 

Is there anything that can be done to ras n'wa th e ca i em a e withl .JJvhat do I need to do in order to get a 
resolution. Do you believe the issue is I b r DCS-5000? 


thnx, 

-ca 


— O riginal Message — 

From: | K KC) (OGA) 

Se nt: Wednesday, August 24 , 2005 7:08 PM 
To i l I fKCI (FBP 


Subject: Continued FISA trou bles 


ZJ(KC) (FBD 
JOTD) (FBI)r 

1 ■— 


](KC) (FBI){ 


]<C) (OGA) 


bl 

b2 

b6 

b7C 

b7E 


(SI 


I I The packet I left for you yesterday (23 

1 August) aSHi l i ail attitoty ana l ine tfoub l fes W the past 1 U days! 1 


Our DSC3000 crashed overnight and we lost our pen data for the past 36 hours. 

The new problems incurred by the stopgap measure are outweighing those it was designed to overcome. 
Respectfully, 


fo2 

b6 

fo7C 

b7E 


Kansas City Division 
Wichita, Kansas RA 
FBI/TTTF 

I |(Desk) 

I F“0 


] 


■DEBlMED.EaQllfcJS. 3 FBI Class i fica t i o n G ui d e C dat ed jj gg. Foreign Counterintelligence Investigations 
PCOL^QOiriOATlON EXE M PTIO N 1 
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JflTD) (FBI) 
12Q04 3:15 PM 
|lTD) (FBI) 


[HD) (FBI) 

ter 07, 2004 2:14 PM 
HjlTD) (FBI) 


Subject: RE: August 10th meeting 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


DCS-3000 is not an interim solution. It acted as an interim T-lil solution until a couple of years ago. Today, the DCS- 
3000 is the FBI's primary CALEA pen-register collection system. 



o 


— -Original Messaae- 

FromL 



Jtd) (FBI)[ 


](rTD) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


□ 

isn't dcs-3000 an interim solution? if this is the case 
maybe we should be 'forward-looking' and begin working 
with the system that will be replacing it... 

— Original Message — 

From: I ] (ITD) (FBI) 

Sent: Friday, September 03, 2004 4:26 PM 

Tol IrrTD) (FBI) r 

cc \ ~l rrTPT(FBi);i h td) mi 

Subject: RE: August 10th meeting 


](ITD) (FBI) 


b6 

hlC 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 

b2 

lb7E 

CD 


If we're authorized in the future to deliver target-specific data to the van, then it would probably make the most 
sense to deliver all the information; visa-vis, a DCS-3000 Client in the van. This way your vendor will not have 
to bother trying to interpret the many variations of CALEA pen-register data (which means less development 
cost and time for your group), and the van teams will have all the available call information in a format 
consistent with the CMP system. 

I 1 b6 

I I b7C 


— Or iginal Message — 

From:|_ 

Sei 



Subject: RE: August 10th meetirl 


□(ITD) (FBI);r 

,ust 10th meeting - 


]CITD) (FBI) 


SENSITIVE BUT UNCLASSIFIED 


430 



UlYD) (FBI) 

'r 01, 2004 7:32 AM 
(UD) (FBI) 


O riginal Message 

FromJ 
Sen] 


(UD) (FBI)C 


iTTP) fFBOj 


Subject: RE: August 10th meeting 


J (UD) (CON)£ 


InrmrPBnj^^ 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


fRanKs for the reply, yes, we can accept NEMA data but there 
was some discussion as to whether or not you could send NEMA II 
as well. As far as security, i have had numerous discussions with 
J(etc.) and they do not have a problem with use transmitting 
431 




the DCS data as well.. -did you have anything particular in mind? 
Also, do you have a copy of the j | that I could borrow? 

thanks. 


b2 

be 

b7C 

b7F. 


Orjninal MessanP 

From ! I flTDI (FBI) 

Se nt: Tuesday, August 31, 2 004 7:00 PM 
To l F D) (FBI) 

Subject: RE: August 10th meeting 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


□ 


matlon you need from the DCS-3000 other than thf" 

_J|we plan to deliver this information in NEMA formST 
e cursory discussion along the lines of pen-register data being 


since transmitting this in formation ovei 


transmitted to the van, but I'm not so s ure the FBI's security experts will buv off on this idea 
information over| 

] If you plan to have the pen-register data transmitted to the van, we 


5T5tt niara* tn nat a look at what's available (field descriptions) is in the 


I I This is the current spec for all things CALEA. If you 

warn to see the UU5-30UU interpret CALEA data, just drop by the lab. 



Subject: August 




SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 




on August 10th you attended a meeting wi { In the PSU 
conference room to d iscuss their efforts to provide | 

1 p their team members in the field. 10 be enecnve, 

tms system requires information that is readily available from the DCS 
system, my notes indicate that during the meeting you agreed to 
provide that information so, when possible, can I get a printout o fc t ha L. — - _ 
information (to include descriptons of the individual fields) so tha| 1 

can coordinate a meeting with the vendor and this effort can proceed? 

thanks. 


SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


c 


To: 

Cc: 


Subject: 


Wr =JiW5rar! 

RE: August 10th meeting 


llTD) (FBI) 
L2Q04 7:00 AM 

haiimn 


3 ,td ) ( F B.),r 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


□ 


isn't dcs-3000 an interim solution? if this is the case 
maybe we should be 'forward-looking' and begin working 
with the system that will be replacing it... 



SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 



If we're authorized in the future to deliver target-specific data to the van, then it would probably make the most sense 
to deliver all the information; visa-vis, a DCS-3000 Client in the van. This way your vendor will not have to bother 
trying to interpret the many variations of CALEA pen-register data (which means less development cost and time for 
your group), and the van teams will have all the available call information in a format consistent with the CMP system. 

□ 


b2 



SENSITIVE BUT UNCLASSIFIED 
NON-RE CORD 
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1 


Also, do you have a copy of the [_ 


From iT™' MP ^ nP "' ~T tT>1 (FBI) 
Senfr ^ ™0 PM 

To l t TD) (FBI) 

Subject: RE: August 10th meeting 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


I'm nnt snr p what tvnp nf infnrmptinn you need from the DCS-3000 other thai| j 

I I ve plan to deliver this information in NEMA format to your interlace, 

do remember some cursory discussion along the lines of pen-register data being transmitted to the 
van, but I'm not s o sure the FBI's security experts will buy off on this idea since transmitting this 
information over d I If yoi 

plan to have the pen-register data transmitted to th e van, we c an assist vou. The best glace to get a 

look at what's available (field descriptions) is in the I T his is the 

current spec for all things CALEA. If you want to see the UCS-3U00 interpret CALhA data, just drop 
by the lab. 


— original Message.-.— 

From J | (ITP) (FBI) 

S ent: Tuesday. August 31. 20 04 11:29 AM 

To l F 170 ) ™ |— 

cd , Irrrm fFBiaC 

I IOTP) (CONI fTD 

Subject: August 10th meeting 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 



From: 

Sent 

To: 

Cc: 

Subject: 


l lTD> (FBI) 

Friday, September PM 


RE: August 10th meeting 


]td) ( fbC 


]tD) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 



what do you think? 


lb 2 
b6 
b7C 
b7E 


Offi 

FronL 


jqlngl Message — 


□ (TTD) (FBI) 


|, 2004 12:48 PM 

- D) (FBI) 
Subject: RE: August 10th meeting 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 





NON-RECORD 


^ IPiSrtli for the reply, yes, we can accept NEMA data but there 


fo2 

h6 

b7C 

bVE 


Also, do you have a copy of th ^ [ hat I could borrow? 

thanks. 


was some discussion as to whether or not you could send NEMA II 
as well A s far as security, i have had numerous discussions with 

| fete,) and they do not have.a-PEPfrlem with use transmitting 



Fronrt [ M ~T FTP) (FBI) 

S ent: Tuesday, August 31. 2004 7: 00 PM 
T d l OTD) (FBI) 

Subject: RE: August 10th meeting 


b£ 

be 

SENSITIVE BUT UNCLASSIFIED b7C 

NON-RECORD b7E 



I'm not sure what type of information you need from the DCS-3000 other than th j l or the 

I [ e plan to deliver this information in NEMA format to your interface. I do remember some 

cursory discussion along the lines of pen-register data being transmitted to the van , but I’m not so sure 
the FBI's security experts will buy off on.thi? i^gg.since.transmitting this information! j 

r «f you plan to have the pen-register data transmitted 

to the van, we can ass ist you. The best place to get a look at what's available (field descriptions) is in the 
I S pecification. This is the current spec for all things CALEA. If you want to see the DCS- 

3000 interpret CALEA data, just drop by the lab. 


— Original Message;;.: 

FromJ 


Se nt: Tuesday, August 31, 2 0i 

tqI If; 


TD) (FBI) 

1 11:29 AM 
ITD) (FBI) 
]TTD) (FBlJ_ 


](TTD) (FBI);[ 


] 




© 


IrTD) (FBI) 


(itd) (i 

Subject: August 10th meeting 


© 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


q August 10th you attended a meeting wit hl h the PSU 
rnnfpfanrp rnnm tn discuss their efforts to provide al J 

I I to their team members in the field, to be effective, 

this system requires information that is readily available from the DCS 
system, my notes indicate that during the meeting you agreed to 
provide that information so, when possible, can I get a printout o f that 
information (to include descriptons of the individual fields) so tha | | 

can coordinate a meeting with the vendor and this effort can proceed? 


lb 2 
toC 
to7C 
to7S 


thanks. 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 


440 


j 


1TD) (FBI) 

±1 2004 7:32 AM 
— UlJD) (FBI) . 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 

□ 

thanks for the reply, yes, we can accept NEMA data but there 
was some discussion as to whether or not you could send NEMA II 
as well. A s far as security, i have had numerous discussions with 
g |etc.) and they do not have a problem with use transmitting 


d you have anything particula 


Also, do you have a copy of tha 


Oriainal Messaae 


From:! 

Sent: 'l USSOav, AUbusi ji. 

|lTD) (FBI) 
-ZCJDT7:00 PM 


T d I (ITD) (FBI) 

Subject: RE: August 10th meeting 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


I'm nnt cnrp. what type of information you need from the DCS'3000 other than the| 

1 I we plan to deliver this information in NEMA format to your interface. I doremerWbSf ^omeHIf^fy discus 
along the fines of pen-register data being transmitted to the van, but I'm not so sure the FBI’s security experts will 
off on this idea since transmitting this information ove rt 

| — | lf you plan to have the pen-register data tr ansmitted to the van, we can assist you. The best place 

'yui d TOOT ar whafs available (field descriptions) is in the! I specification. This is the current 


spec for all things CALEA. If you want to see the DCS-3000 interpret CALEA data, just drop by the lab. 




From! 

IflTD) (FBI) 

Sent! Tuesday. Aunust 31 . 2004 1 1 !?0 AM 

l°I — 

[ITD) (FBI) r 

(ckij 

JtfTD) (FBI);| 
JTD) (FBI) 1 " 


Subject: August lutn meeting 


](ITD) (FBI);[ 


JtTD) 


SENSITIVE BUT UNCLASSIFIED b „ 

NON-RECORD fo “ 

b7C 

k>7E 


□ 


the PSU 


on August 10th you attended a meeting w 

,discuss their efforts to provE _ 
their team members in the field, to be effective, 
information that is readily available from the DCS 


<vith | lin 
srovideal 


tnis system require 

system, my notes indicate that during the meeting you agreed to 
provide that information so, when possible, can I get a printout o f that. 
information (to include descriptons of the individual fields) so that ! ] 
can coordinate a meeting with the vendor and this effort can proceed? 

thanks. 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 
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D TDWCONI 
"5S0o 7:45 AM 

DIQJ(CON) 

lOTDWFmvr~ 

I OTP) (FBI’ 
j (OTD)(CON);[ 
0 <-> EDMS Interface 


DTDVCON1: 

_JOTD)(CON) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


fo ahead and log these as the official minutes. 


Requirements Analyst, ESS 
OT D:ESTS:ETM U 
703j ' ~~tNew!l) 


OTD) (FBI); 

3EH5n) * 

|(OTD)(CON)r" 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORP 


< File: DCS-3000 EDMS lnterface.doc > 


Requirements Analyst, ESS 
OTD£SIS£TMU 
703] n(Newll) 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


OTD)(CON) 

DRAFT DCS-3000 <-> E 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Attached is the DR AFT DC S -3000 to EDMS interface meeting notes. Would attendees please review for errors and 
omissions? Woulc| Tanl tie the action item assignees for scheduling the next meeting ? 


Requirements Analyst, ESS 

nr n-FSTR-FT Mii 

70 j lf Newl!) 


SENSITIVE BUT UNCLASSIFIED 


|(OTD)(CON) 

asouSEBnnnb s:4i am 

-^□(OTb)(c!oN) r^ 

I f OTP) (FBI) 1 

nterface Discussion 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Just fo llowing u p on a phone message l just left. I am on the requirements team for EDMS and was asked by| 1 

an d l our Deputy PM and Architect, to start gathering the requirements for the interface between DCS30UU and 

EDMS for text messages. 

I k nd | would like to meet with you to discuss this. Could you please suggest a couple of 

date/times and I'll coordinate a meeting? Please suggest the names of other folks from your side that should be there. 


Requirements Analyst, ESS 
OTD:ESTS:ETMU 


m 


SENSITIVE BUT UNCLASSIFIED 


UNCLA S SIFI ED 

NON-RECORD 


JL-A) (FBI) 

1 2006 11:3 8 AM 

ZZfefD)(FBI)| 


We upgraded our machines. W e really like the changes . If s funny how the smallest things can make your day. We like 
that all the features are vi sible, id I etc., on the window used for entering the target information. We 

also like the rhannafrnmi h ffie standard court order terminology of | | I 

rituunniH hA niro if I Iconid also ha changed to the standa rd court order terminology o l I 

I I We were a bit disappointed that we still canoflLcqncatenate the | [ files. We really LOVE the 

concatenate feature. As you know, we have dropped th e| fr nd have been using the concatenate feature to upload our 
CDNRS files for about two weeks now. It is awesome! Please thank all at TICTU for their tremendous work. 


I will forward the below info, to the Tel Apps people and see if they can get it corrected. 


— Original Message — 


| (OTD) (FBI) 
11 Mb /:02 AM 


unclas sif ie d 

NON-RECORD 


Since TA is an analytical tool we pass all the dialed digits from the DCS 3000. Have you contacted TA to s 
can modify their system to handle this types of called numbers? 


— Orig inal Message- 

From: I 
Sent: 


UNCLASSIFIED 

NON-RECORD 








This may be something you have long been 


the uploads, I have not seen it before. On some outgoing 


■iiagmsiaaBaimg I I I I 1 1 I I lul I 


are outgoin g calls from 

phones to local numbers here in LA. I can't believe would be dialln l "b efore they make 
local call. Do you know why this Is happening? 


J(LA)(FBI) 

an/ 28. 200 5 2:29 PM r 
J[ITOD)(CON)l 
e TTOD) (FBI) ■- 


Attached is a document containin g the instructions we provide to case agents for uploading the ir 
| "1 data. The case agents are currently uploading th j I 

Tiles obtained from the DCS ^0uO collection system (I previously sent several samples of th| 
files to you). The attached dcpimant also provides an explanation of the current issues/problems 
associated with uploading the l f iles. Hopefully this will help you guys to resolve these 

problems/issues. Thanks for your help. If you have any questions just call me,| | 





From: I I lLA) (FBI) 





1 , 

IIITD) fFBh 


Subject: 

REl 


b2 


fo7C 

gf 

Notebcok.jpg (2 
KB) 

SENSITIVE BUT UNCLASSIFIED 


1 O btained from DCS 3000. not from the CGI page) 
K 


— Original Mpsviflp — 

Froii^ | (ITD) (FBI) 

Se nt: Tuesday, Novem ber 23, 2004 3:14 PM 

tqJ _ lA^rFan 

Subject- Rf| 


] 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


□ 


Can you tell me th d fr I was unable to find the j p sing Microsoft Excel. 


b2 

b6 

b7C 

b7E 


I 


Sent: 

Tod 

Subject: REl 


Inal Message-— 

(FBI) 

NovemBer 23 . 2004 6:11 PM 


rrrp) rFBD 


» 
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Thanks, 





O riginal Message- 

Froml 


JLA) (FBI) 

— 2004 9:27 AM— 



]m» (FBI)£ 


3td) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


lb 2 
foS 
b7C 
Jb7E 


Hi guys, 


Attached is our latest list of cell sites from| | I was wondering if it could 

be added to the TICTl) website please. 1 1 

Also, in the attached spre adsheet I h ave discovered th at thel ~\ 

How ever, good news, t he r N complete. Whd j 

I [ his is what I do to find th l Ifl rt thfi dhacnea spreaa 

sheet: 


These steps have not failed me yet. I was wondering if ! t uld be modified to 

do this? Let me know. 


Thanks, 

□ 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 
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Notebookjpg (2 b7E 


SENSITIVE BUT UNCLASSIFIED 

NON-RECORD 


<3 



These steps have not failed me yet. Case agen ts have conf irmed that the addresses I am getting 
correspond to surveillances. I was wondering if l ""fc ould be modified to do this? Let me 

know. 


Thanks, 



bTE 


SENSITIVE BUT UNCLASSIFIED 




NON-RECORD 


o 



TJ 


nzn 

\ processed at) the cellsites you recently sent me. It appears this data is not up to date. For 
example, taraet l I todav at around 13:28. Thi j 

is not listed in the latest j s preadsheets. 

I have updated voui l i vith the most recent data, but you should probably askeq |f 

they have better data available. 1 1 

I 1 

— Original Message-- 
Fron t I LA) (FBI) 

Sent: Monday, November 22, 2004 9:27 EM I 1 

Tb ^ " ''laTD) (FBI)l ^ p TP) (F8I)J | (ITD) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Hi guys, 


Attached is our latest list oi l ""T on] | I was wondering if it could be 

added to the TICTU website please. 

Also, in the attached spr eadsheet I have discovered that th j I 

However, good new s, the! fet is complete. When | | does not l ~l 

I U s is what i do to find th j ~} n tne attached spread sheet: 


b2 

b6 

b7C 

b7E 


These steps have not failed me yet. I was wondering if | |could be modified to do 

this? Let me know. 

Thanks, 
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FBI EXERCISE Activity Log 
incident Report F...xS6000.doc (61 K.. 


NON-RECORD 


UNCLASSIFIED 


□ 


I was told that you are the ISSO for the 3000, and that you might be interested in a copy of the forms I filled in for the 5000 
and 6000 to complete this exercise. 


(O) 703] 

(P) 703- 
(C) 703] 


O riginal Messaqe- 

From:f 
t: T 


2L 


lOTD) (CON) 

hursaav. May 047200 51:21 PM 


Subject: FW: DOJ IRP EXERCISE 


U0TD)(C0N) 


UNCLASSIFIED 

NON-RECORD 


H ' l I 

Please complete the exercise below for the following systems: DCS-3000, DCS-5000, DCS-6000 and J3094. 1 have 
included the SSP for the J3094. 1 know you are not the current ISSO for all the systems, but by supporting TICTU it would 




# # 

be good for you to take on that responsibility. In order to complete the exercise, use your best judgement. My approach in 
your situation would be to complete the exercise according to best practices. If the systems do not actually meet best 
practices, then you can write th^ua^&aJessons learned and work on improving the process later. We can talk about that 
some more later. I will ha nut hnl lis avai lable if you need help. If you have any more questions, please do not 

hesitate to contact ! | or | | 

BTW the exercise is due on May 10, 2006. Sorry for the short notice. 



?OTD) (FBI) 

DOJ IRP EXERCISE 


UNCLASSIFIED 

NON-RECORD 


Gentlemen: 


| | (CSO/OTD) provided a list that identified each of you as POCs f or several sy stems that need to be 

represented inttie Annual DOJ IRP Desktop Exercise. This list was provided b vl I n response to an EC soliciting 

POCs for specified FBI systems. 

In order to comply with Federal Information System Management Act (FISMA) requirements, DOJ must test, at least 
annually , all component computer system Incident Response Plans (IRPs). This "test" or "Exercise" verifies that all 
components have (1) incident response plans (IRPs) , and (2) that components know where they are and use them. The 
results of the desktop exercise reflect not only the components IFBI1 computer security posture, but also the Departments 
computer security posture. 

fc >2 

You were identified by your respective Division/Field Office CSO as the point of contact to participate in this years DOJ IRF^JL 
desktop Exercise and you should have been contacted by your respective CSO regarding this as well as the systems you f 
will be representing. This effort should take approxi mately 15-30 minutes of vp ur time to complete. Once completed, the b h 
required documentation will be e-mailed from you t d I for compilation and dissemination to DOJ. 

Additionally, a Lessons Learned report will be required and must be received by May 10,2006. All required 
documents/templates are attached to this e-mail. 

Below are: (1) The section of the EC indicating the systems that need to be represented and (2) the instructions for 
participation in the desktop exercise. 

If any of the systems do not have an ATO or they are unknown, or you are not the appropriate POC, please indicate so in a 
response e-mail. Otherwise, please follow the instructions pertaining to the exercise and post-exercise. 

This exercise should take no longer than 15-30 minutes to complete. The exercise documentation is due to me NLT 12:00 
noon. Tuesday. 10MAY2006 : 

"Set Lead 25: (Action) 
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o 


OPERATIONAL TECHNOLOGY 


AT QUANT1CO. VA 


^ Provifift tfe names and nhone numbers of the rfesinnated renrasent atives of I . - I 

tS)J" UU ' ' U '‘* Nh " ' l"TIOTI i-Rprver I * I 

’ L , — ^ — I who will par ticipate in this Exercise no later than April 14. 2006 to SSa I I 

lnr | E Q2-324' ! I 

bl 


EXERCISE INSTRUCTIONS : 

1 . Review the scenario's (choose the scenario that best applies to your system(s)). (The questions accompanying the 
scenario’s are just for you to consider when addressing the scenario - no response to the scenario questions is 
necessary). 


b2 

b6 

b7C 

b7E 


2. Review/refer to the Incident Response Plan (IRP) - SBU-Net and FBI-Net systems: Section 9.4 of your respective IRP; 
CJIS systems: appropriate Section(s) of your IRP. 


3. Fill-in the "Exercise Activity Log" - (the date and time will be the actual date and time you receive this e-mail. The first 
activity block is the scenario. Subsequent entries will address date/time and activities you performed when reacting to the 
scenario). 


4. Fill-in the "FBI Exercise Incident Report" - the date and time will be the actual date and time you receive this e-mail. 
Only fill-in as much information as you need to and are capable to. Not all blocks are expected to be filled-in, although 
they may if you know the information - it’s up to you how much detail is provided.) 

5. All Exercise Responses (Incident Reports, Exercise Activity Logs) are due NO LATER THAN 12:00 Noon. Tuesday. 
May 10. 2006 . 


POSTjjXERCISE INSTRUCTIONS: 

1 . Review Lessons Learned material 

2. Complete Lessons Learned documentation 

3. E-mail Lessons Learned material t J I no later than 12:00 noon. Mav 10. 2006 . 


lb 2 
b6 
fo7C 
b7E. 


Please contact me via telephone with any questions that you may have, keeping in mind that I am one-deep and there are 
multiple participants. Please retain the I RP. This is a living documen t so make any/all adjustments to it, turn "track 
changes” on, and send those changes tq| _ hr configuration management of the master document. 

I will return the updated document to you with the changes. This should become a cyclic process as changes occur. 

1 I 


FBI ESOC-VIAC 
202-324 1 1 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


I 


|oTD) (FBI) 

From: 

Sent: . 

To- 

1 HI (NO) (FBI) 

Thursrlav Ann list 10 13 AM 

lOTDI IFBIil 

IfOTDi /FBlI 

] 

I 

i 

KQTD1XEBI} 

LQIDiICQfcUl— 

NOl fFBIll IfNOi fFBIVl 

~~koi (FBIbl 

=1 


(NO) (FBI)I 

ruNor/FBIVl 


rNoTTOI 

=? 

Subject: 


| KbN KKQBUBVIS 


fo2 

Importance: 

High 



lb 6 
b7C 


UNCLASSIFIED 

NON-RECORD 


Ahnnt a month ago we received a pen order from oi 
s not CALEA compliant at their switches 


■ Ahffllt a month ago we r 
1 manual up loads by ar^ 


Subscriber. Long story short, 


we can get pen info is thru daily faxes, and then 


After being passed to several people, we ended up with 
our whole DCS-3000 system, etc. Anyway, his number 
get CALEA compliant, it seems we’re SOL 

s/C 


thgtheirterhnirr 

' € V 


Uoesn't really seem to grasp 


ihould any of ya'li wish to call him. But until they 


TeChnical.AdMgor, New Orleans 
Office 
Cell 


UNCLASSIFIED 


|(N0) (FBI) 

Monday March OR 2006 11:24-444- 

» (QTP) (FBI); 

(OTD) (FBI) 1 

FW: New Orleans DCSNET circuit 


un c la ssified 

NON-RECORD 


FYI, below is update on our move. 


or, New Orleans 
Office (Temporary) 
Cell 


— Original Mes 

From: 

Sent: 


UNCLASSIFIED 

NON-RECORD 


l(NO) (FBI) 

idav. March 06. 2006 10:15 AM 

New Orleans DCSNET drcul— 


Yes l I did install circuit We will be moving in circa 4/15. We were initially sat tn mow in during this week and next, 
but Systems Furniture cannot have our new stuff installed 'til 4/1 0. I talked to j | iast week and I will be 

submitting an RMS today for two new DCS-3000s, etc. In answer to your question I will need new routers. The old 
equipment was toss about during the move from NO to storage in Baton Rouge and I have no fai th in their usab ility | 
would say ship those to our old office in NO on or about 4/1 5. Any questions, give me a call {504 1 I ^ 

Thanks for your help I I k> 6 


Tec hnical Advis or, New Orleans 

(2251 V Office (Temporary) 

(504| I- Cell 


From: | |)TD) (FBI) 

Sent: Monday, March 06. 20 06 9:S0 AM 

To: I INO) (FBI) 

Cc: | fOTD) (FBI) 

Subject: New Orleans DCSNET circuit 

UN C LASSIFIEB 

NON-RECORD 


jells me your DCSNET circuit in New Orleans has been installed and is ready for tum-up. Do you have an 


updated schedule on when you will be moving in? Will you need new routers? Any idea what happened to the old 
equipment that was there? 


hi 

h2 

fe6 

b7C 

fc7E 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


( S ) Your ckt ld i j *1 

Please let me Know it you have any questions about this circuit or the install. 



H I 







From: 

Sent: 

To: 

Subject: 


l(NO) (FBI) 
rtnn*; inoa a 


2005 10:29 AM 

I.. ,, , , ( p BI) 

RE: Upcoming TICTU Regional Conferences 


UNCLASSIFIED 

NON-RECORD 



Let me repeat what I've said in the past - 1 get more out of these TICTU conf erences than any o ther conference/in-service 
I go to. Having said that. I wo uld be interested in a little more in-depth look a l , n? p CS-3000, as well as , b7c 

I I capability of the DCS-3000. Also, I am lead to believe tna i h as a new "CALEA" ® 7 e 

solution for land lines with a simple to install device. I would like more on this. i i 

Thanks and keep up the good work - sorry about the Hokies loss to Auburn in our fair city. 


TecE 

(50f 


vide 


lew Orleans 


Original Message 


Zl(rrD) (fbi) 

1505 9:13 AM 


y 64, i{ 

SuLject: upcoming i^RI Regional conferences 


|(ITD) (FBI f 


^(ITD) (CON) 
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U NCLA SSIFIE D 

NON-RECORD 


In the first half of 2005 the Telecommunications Intercept and Collection Technology Unit (TICTU) plans to once again 
host two regional conferences. These forums will provide specialized training to field office practitioners responsible 
for telephone ELSUR operations and foster cooperation between the FBI and the nation's telecommunications 
industry. 

TICTU is currently developing the agenda for these conferences and requests your suggestions for agenda topics and 
carriers of particular interest. We need your in put as soon as p ossi ble so that we can set a tentative agenda. You 
may send your ideas to me via email or contac t l it 70 ^ | 

Thanks, 

□ 


UNCLASSIFIED 



UNCLASSIFIED 



UNCLASSIFIED 

NON-RECORD 


All - Attached in the message below is the OIG's "final" list of documents they have not received concerning the DCS- 
3000, DCS-5000, and DCS-6000. Please review your records and forward to me any documents you find. I will forward 
them to the OIG. 


— Original 

From: 

Sent: 

To: 

Ce: 

Subject: 

UNCLASSIFIED 

NON-RECORD 


Hello: 

I just received an e-mail from the OIG regarding documents that were not received pertaining to Digital Collection. I know 



460 


you are in the process of giving me additional documents. I am attaching the list of items, so that you could compare your 
list with the OIG. I will continue to collect the documents from the S: drive. 



DIGrTAL 

LECTION.pdf (936 Y 


I | >RRU 

inspection uivision 


UNCLASSIFIED 


UNCLASSIFIED 


[ 


loTDI (FBI) 


From: 

Sent: 

To: 

Cc: 

Subject: 


Activity Report 


r OTDI (CON) 
.2006 9:42 AM 
- rOTD ) (FBI) 


J(OTD) (FBI) 


be 

b7C 


UNCLASSIFIED 

NON-RECORD 


I 1 1 have to track the dollars allocated and spent using DCS-5000 funds in an Activity Report. SBIT was given 

$600,000 for DCS-30Q0 support. Can you provide the following information that l need for the report? 



I will also need to know the amounts invoiced each month. Call me if you have questions. 
Thanks □ 


UNCLASSIFIED 






From: 

Sent: 

To: 

Subject: 


I t lTDI (CON) 

Tuesday. January 04. 2005 1:44 PM 
I K ITD) (FBI) 

i-vv: upcoming i i(J I U Regional Conferences 


UNCLASSIFIED 

NON-RECORD 


FYI 

Original Message 

From ! I PX) (FBI) 

Se nt: Tuesday. January 0 4. 2005 12:24 PM 
To: | |T D) (CON) 

Subject: Kb: upcoming IiCTli Regional Conferences 


UNCLASSIFIED 

NON-REC OR D 


Happy New Year. Regardin d fc e-mail for topics: 


1. Policy procedure for storage and maintaining of collected information from the DCS 3000. What is our requirement for 
maintaining the log, sum and cdnr files? Do we need a printed copy? Is it evidence? It would be nice if all the 
divisions/plants were on the same page regarding this topic. It may be more of 3 i ssue. I realize this is not a 

carrier issue, but rather an FBI issue. I am not sure this is the forum for such a topic. 


2. What are the chances of having incoming, FOREIGN calls identified as such (or even outbound). 

3. Any continued development in the I b rea is a good thing. 

Thanks. 


fo2 

he 

b7C 

b7E 



O riginal Message — 

From ! ~**ll TD) (FBI) 

c T 1 KITD) (FBl) r t lTD) (FBI); | 1 (ITD) (CON) 

Subject: Upcoming T1CTU Regional uonrerences 




UNCLASSIFIED 

NON-RECORD 






9 


In the first half of 2005 the Telecommunications Intercept and Collection Technology Unit (TICTU) plans to once again 
host two regional conferences. These forums will provide specialized training to field office practitioners responsible 
for telephone ELSUR operations and foster cooperation between the FBI and the nation's telecommunications 
industry. 


TICTU is currently developing the agenda for these conferences and requests your suggestions for agenda topics and 
carriers of particular interest. We need your in put as soon as p ossibl e so that we can set a tentative agenda. You 
may send your ideas to me via email or contact ! B t 7Q3 j I 

Thanks, 

□ 


b<5 

b7C 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


From: 

Sent: 

To: 

Cc: 

Subject: 


Iiotdhfbq 

| ~~|(O TD) (CON) 

' iiibbwbu inwa 'iJ oRica-cp AM 

l ^ J OTO) (FBI) 

1 FW: Notes found ! rom Conference 


UNCLASSIFIED 

NON-RECORD 


FYI 


— Original Mwanp — 

From: I h (FBI) 

Sent: Friday mop nq ?nn fi 5:13 PM 

To: I I fOTDi (CON) 

Subject: RE: Notes found ftom Conference 

UNCLASSIFIED 

N ON-RECORD. 


lb 6 
b7C 


Thanks for everything at the conference. 

As of today I h ave already sta rted working on the TMD, disconnected the DCS3000 from the J3094, recommended our 
Analyst contad |for guidance using Telephone Applications, and I am working to set up a legal meeting 

between our UTO and the Legal Technology Unit THIS CONFERENCE IS EXTREMELY IMPORTANT TO ALL TECH 
AGENTS! 


Thanks 


UNCLASSIFIED 

NON-RECORD 



Hi! It was great seeing you all in Denver. Hope you enjoyed t he conference. When cleaning up the room after the 
morning session on Wednesday (before th d I ) picked up someone's notes, if you think they might be 

yours, please contact me and l will forward them to you. 

Thanks to all of you for helping the conference be such a great success- 



)TD) (CON) 

21,2005 12:53 PM 

(FBI) | 

□(OTD) (FBt)| 


UNCLASSIFIED 

NON-RECORD 


This email is to request an ITAR number(s) for the Telecommunications Intercept and Collection 
Technology Unit (TICTU) training seminars being held in San Diego, CA on April 12-13, 2006 and in 
Denver, CO on June 13-14, 2006. 


Details: The TICTU will conduct two identical two-day seminars on switch-based intercept concepts 
and methods. The seminars are designed for Technically-Trained Agents (TTAs) and support 





personnel who routinely use collection equipment supported by TICTU. The seminars will provide 
training on new DCS-3000 features and updates on many issues related to switch-based electronic 
surveillance. Additionally, the participants will acquire a current overview of the Communications 
Assistance for Law Enforcement Act (CALEA) compliant solutions that telecommunication carriers 
use, and an updated description of the techniques developed by TICTU to provide intercept 
capabilities for these carriers' solutions. 

Two representatives from each of the following offices are being invited to attend the seminars; 

San Diego, CA - April 12-13, 2006 

Albuquerque, Anchorage, Birmingham, Buffalo, Chicago, Columbia, Dallas, Jackson, Jacksonville, 
Kansas City, Little Rock, Los Angeles, Louisville, Minneapolis, Mobile, New Haven, New Orleans, 
Oklahoma City, Omaha, Phoenix, Pittsburgh, Richmond, Sacramento, San Diego, San Juan, Seattle, 
Springfield, and WFO. 

Denver, CO - June 13-14, 2006 

Albany, Atlanta, Baltimore, Boston, Charlotte, Cincinnati, Cleveland, Denver, Detroit, El Paso, 
Honolulu, Houston, Indianapolis, Knoxville, Las Vegas, Memphis, Miami, Milwaukee, Newark, New 
York, Norfolk, Philadelphia, Portland, St. Louis, Salt Lake City, San Antonio, Tampa, San Francisco. 


Please let me know if you need any additional information. 


Thank you, 
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I need to speak to you about the CI-100 that interfaces the DCS-5000 to the DCS-3000. This system was originally 
accredited as a part of the DCS-3000. During the DCS-3000 re-accreditation kickoff meeting fast week, it was identified 
that the CI-100 was Type Accredited as a "Secret" system and therefore cannot reside within the boundary of the DCS- 
3000, as it is a SBU system. What this means for DCS-5000 is that we will need to expand the DCS-5000 boundary to 
include the CI-100. I need to discuss this with your management to determine if this will have a major impact on your 
operations. I don't believe it will as CI-100 is managed by the same group within OTD. If possible I would like to meet 
with you and whoever you deem necessary to discuss this, preferably tomorrow 1 1am or Wednesday 1pm. 


v/r, 



Sec D/IAS/AU 
(202 1 ~| 



Gentlemen, 

We are nearing a decision point on PAM Module implementation. Thus far the system vendor has told us 
that PAM implementation will require extensive research to ensure that it will not cause system 
malfunctions. This testing cannot take place until after the PAM module has been identified and the current 
security baseline has been fielded; due to ongoing work and scheduled system upgrades. 


In addition, there is some question as to what the Requirement is for this item. Identifying a PAM module 
that works well with N1S+ is proving difficult. I recollect a conversation with the Security Division test 
team. In this conversation it was agreed that finding PAM modules that work as advertised (providing 
greater security without causing increased system outages) were difficult to find. In addition, I was left with 


the feeling that this was a normal finding for Solaris based systems and thus would be waived. It was agre ed 
that this was not a DCS-5000 system problem, but a much broader problem occurring on mosd j 

platforms. Perhaps I misunderstood what was said. This brings me to my question: 1 1 


SEJii 



Vulnerability Scan E 


¥ SecD) (CON) 
a 1:64 PM 
](OTD) (FBI) 


UNCLASSIFIED 

NON-RECORD 


Hello Again, | \ 


Hope your Memorial Day Weekend was very fine. 

I know I mentioned subject EC a couple times when we talked on the 22nd but I don 't remember if I promised ti 
send you a copy. Since my memory fails me, here 's a copy. As we discussed during our little meeting, I'm not 
sure DCS3000 lends itself to this type of scan, but I believe it does. That'll be something for you to work out 
with the ESOC folks once you're considered for the test. As you read the EC, you'll see that routine quarterly 
scans by the 1SSO/ISSR are also required 

TbaaksJbr taking the time to talk with me. 1 enjoyed our meeting and seeing you again. Take good care. 


|SecD)(CON);L_ 

J(SecD) (FBI) 

Te-lnspecb'on Self Assessment 


UNCLASSIFIED 

NON-RECORD 


I'm an information systems security representative (ISSR) supporting SD/IAS/ITSU in subject effort. I've been 
tasked to work with you in preparation for an upcoming FISMA inspection due to begin any time after May 
25th. When the exact date of this inspection is announced, either I or one of my teammates will be contacting 


I've been notified that each of you is an ISSO for a particular system (or systems) as shown below: 

ChemNet ” ” " 

DCS3000 

FAVIAU LAN | | 

OPDC LAN 1— 1 

VICAP Web) 

DCFS 
DCS5000 
DCS Net 
IPGNet 
TTAP Net 

Cl Net 

In the interim and by COB, 25 May, here's what's needed to get prepared for the upcoming inspection via this 
self-assessment evolution: 

> If a system approval-to-operate (ATO) will be greater than a year old as of June 2006, then: 

(1) It must be scheduled for a Found Stone scan by an ESOC representative. Note: At his direction, I will tell 

S Acting Quantico Complex Information Systems Security Manager (ISSM) j fr f a scan is needed so 

an coordinate same with all parties. 

(2) The SSP must be reviewed and changed, if necessary, for currency, and that review and any changes 
documented on the SSP "Record of Changes and Review" page. 

(3) The system contingency and incident response plans must also be reviewed and changed, if necessary, for 
currency, and those reviews and any changes documented on the SSP "Record of Changes and Review" page. 

I've given all of you a call already on this, and for those of you I couldn't talk with at the time, I left vmail 
messages with requests for return calls. I've also worked with several of you in past years on the systems shown 
above (or others), but I'd still like to come by and talk with you on this effort sometime between now and COB 
on the 23th. Again, for those of you I haven't talked with already, would you please give me a holler as soon as 
you can so we can schedule a date and time for our meeting? I look forward to hearing from you very soon. 

Thank y ou very much ahead of time for your assistance and interest in this. 

o 

P.S. If you'd like to call me rather tha n send an email message, my work phone's 703 1 \ nd my 

Blackberry number’s 20 21 \ IfI don't answer your call right away, would you please leave a message 

so I can get back with you immediat ely? Time is of the essence. 

P.P.S. In a few instances, | J may come by to talk with you instead of me. Thank you again. 

JWS 


UNCLASSIFIED 




be 


UNCLASSIFIED 

NON-RECORD 


Seattle just received our copy o j | Whenever you get an opportunity (do not stop everything!) give me or 

I 1 call and we will worK With yfiu gZTgBl our DCS 3000 "adjusted" 

THANKS! 


UNCLASSIFIED 



SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Marcus Thomas has asked that we determine the cost of the IT portions of the OTD collection systems listed on the OCIO 
master list of systems, applications, databases, and networks. For the systems/projects listed below, please determine or 
estimate as best you can the cost of the hardware, software, and the development work for the interface to the Trilogy 
network or other FBI IT infrastructure. This will help us separate the funding of National Security Systems that are not truly 
IT from IT systems, databases, applications and networks. Please provide an estimate by Friday 3/24. 

EDMS - IT Interface 
DCS 6000 - IT Interface 
DCS 3000 - IT Interface 
DCSNet (CALEA transport) 

CARTSAN - IT Interface 
CART Family of Systems 


Central Monitoring Plant Network 

Central Monitoring Plant Systems Operations Center (CSOC) 

I ~l 

Thanks, 

I I PE, PMP 

Electronics Engineer, Program Management Office Manager 
ELSUR Management Technology Unit 
Electronic Surveillance Technology Section, OTD 
Phone: 70 | 1 




From: 

Sent: 

To: 

Cc: 

Subject: 


j □ (CQ)(FBI) 

Thursday January 20 SOflfi 1 :55 PM 
[ (1TD) (FBI) 

Jrn-ns tc an 

New Delivery interlace or l I 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


So2 

foe 

fo7C 

fo7E 


□ 

Are you aware that } I s building a] I interface for CDC delivery for their I fc witch. including the hybrid 

switch. 1 1 

They will maintain th j I terface, but the | j rill phase this out. (Delivery interface is their choice.) 

I know that JSI has the spec, and is building to it. 1 don't know if they are far along. 

I also have the | ~"l spec if you need it for the DCS-3000 It follows 2 publicl I 


This might be a good example of why we need the manufacturers to notify CALEA if there are any major changes to the 
delivery 

interface that impact LE collection. 

Let me know if you need the spec. 



SENSITIVE BUT UNCLASSIFIED 
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From: 

Sent: 

To: 

Subject* 


UNCLASSIFIED 

NON-RECORD 


□ 

I'm reviewing! Ilocumentation, and it&tpws that ERF tested the DCS 3000 with their 

I' ^ t' aaiia i iy To L)CS-3U(JU cSIlCTg Call Content over aOnterface. 

I would like to verify this with you. I didn't think that we could do this with the 3000. 



UNCLASSIFIED 


From: 

Sent: 

To: 

Subject: 


^OTD) (FBI) 


■re: i iu u LflMpuar 


lUb b'4 fa 

[OTP) (FBI) 
■BSSea T ‘ ' 


d Training 


UNCLASSIFIED 

NON-RECORD, 

HeJ I 

be 

I’ll give the training course a try. Please send me the CD and I’ll try and get it done according to your time-frame. b7c 

I Imp 


u .«Sk»saifiEB 

NON-RECORD 


□OTD) (FBI) 


TICTU Customer, 

The TICTU has created a computer-based training course for TTAs and CMP technical staff. The course, entitled 
Switch-Based Intercepts using DCS 3000, provides background information on the technology used to conduct CALEA 
based intercepts as well as basic information on how to use the DCS 3000 suite of applications. 

TICTU needs your help! TICTU needs to conduct a beta test and review before releasing the course to the entire 
CMP community. To this end, we ask you to help us evaluate the training. If you agree, we will mail you a CD with the 


training course and instructions. Ail we ask is you review the material and fill of the evaluation form. TICTU would like 
to release this training to the field as soon as possible. If you can, please submit your evaluation form by Friday, July 
21,2006. 


If you are unavailable to review this course, 
directed t d "1 at (703] 

Thank you for your help ensuring that we produce a quality training product. 

Thanks, 


know. Questions concerning this course review can be 


UNCLASSIFIED 


UNCLASSIFIED 


From: 

Sent: 

To: 


Subject: 


]OTD) (FBI) 


I If SecDI (FBI) 



1 m JLU , Kotdhfbii 

m ' 

I ISecD) (FBI)l 

DCS3000 ATO EC 

,0 “ CU) 1 


be 

fc7C 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


If you have any additional questions please contactf 


H 


DCS-3000 ATO EC 
06012006. wpd (... 

SENSITIVE BUT UNCLASSIFIED 


473 



NON-RECORD 


Thanks for having l l eply to me. I do have some more information. Had a call late last week from l li n PX. 

She is having the same problem that BS is having as shown in the couple of records that I had sent She gave me more 
information on what is happening. They are using the DCS3000 but then running the files through the J3094 before 
uploading into TA. On pens from pre-CALEA phone co mp ani e s there is not problem. This problem only occurs on pens 
from phone companies that are CALEA compliant. I told I h is. TA has made a fix that will be going out with the release, 
but wanted to let you know what is causing this issue on many incoming calls. 

□ 


Original Message--- 

Froi rf Ir OTDY (FBI) 

Se nt; Monday. Septem ber 19, 2005 10:05 AM 
To d l oTOpycom 

Subject: RE: j3094 question 


UNCLASSIFIED 

NON-RECORD 



UNCLASSIFIED 

NON-RECORD 


□ 

Can you answerl Iquestion? 



From: 

Sent: 

To: 

Subject: 


UNCLASSIFIED 
NON-RECORD 

b7E 

Thanks. 


— Or iginal Message — 

From; ! "[ (OTP) (FBI) 

maaV ' AUgU ^ Q DXCON) 

Subject: RE: question o nl l ie 


JITOD)(CON) 
2QQ5 8 4 3 AM 


RE: question on|^ 


IOTD) (FBI) 


UNCLASSIFIED 

NON-RECORD 



b2 

be 

b7C 

b7E 


nn 

— Or iginal Message — - 
Fr om:|^ ^ „ l(rrOD )( CQ N) 

Subject: quesBon’oi ^^^ M | lle 


UNCLASSIFIED 

NON-RECORD 


□ 


question fr om a user who wante d to know which field(s) in the trace file from the the DCS3000 for 
contained | jCould you let me know. Thanks. 


476 




UNCLASSIF IED 


unc lassified 


UNCLASSIFIED 



UNCLASSIFIED 

NON-RECORD 


wanted to know which field(s) in the trace file from the the DCS3000 foi | | 

ould you let me know. Thanks. 1 1 


UNCLASSIFIED 



(OTP) (FBI) 




Omi 

402 


I I 


un clas sified 


UNCLASSIFIED 


From: 

Sent: 

To: 

Cc: 

Subject: 


Hotdhfbq 


Thursday. JuiyTT! 


|O I D) (CON) 

to EDMS Schema 


JTD) (CON) 
2:11 PM 
UMD) (FBI)] 
J(OTD)( 


JtoiC 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Attached is the first draft of the schema to be used for sending data from DCS-3000 to EDMS. Please review it and 
provide comments. 



DCS3K_XMLSchema 
.xsd (8 KB) 


1 spnware e i iyme ei 

ELSUR Technology Management Unit 
Electronic Suuailisuac&Xechnology Section, OTD 
Phone: 70? 

Cell: 57^ 


SENSITIVE BUT UNCLASSIFIED 



L6 

lb7C 


To: 

Subject: 


I 1 (HN)(FBI) 

M m daiLJi i ji2.4^Q.0.g.5^6 | PM 
I |OTD) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


ire you able tcP 
shoot this. 


^The cables are in the same setup, nothing changed. Email me steps to 


Thanks. 


fo2 

be 


lesk 

Dell 

Server Rm 


— Original 

From: 

Sent: 


, JCHN) (FBI) 

Friday, July 21, 2006 1:39 PM 

PTOUEBIl 
T(HN)(FBI)i 


RE: DCS3000 


3(HN) (FBI) 


UNCLASSIFIED 

NON-RECORD 


I ^ I Checked th<Q 

□ 


— Original Message^^^ 


Subject: 'ftEMSMfl 

UNCLASSIFIED 

NON-RECORD 


JCOTD 
234 PF 

—b 


[OTD) (FBI) 

J\ 

(FBI) 


bl 

fo2 


fo7C 

b7E 



e 


9 



UNCLASSIFIED 

UNCLASSIFIED 

UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 



— -Original Message — 

From: I rOTD) (FBI) 

Sent Friday. July 21. 2006 12: $ 6 PM 

To: I l(HN) (FBI) 

Subject: 1 Kb! UUdUUU 1 
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— Ori ginal Message — 

From! I Il N) (ran 

Sent: Friday, lulv 21. 3006 6:35 PM 

To: ,1 . ■ l(OTD)IEBP 

Cc: I KHN) (FBI)I hN) (FBI) 

Subjec t: WSWB 1 


UNCLASSIFIED 



808| lesk 

808| tell 


UNCLASSIFIED 

UNCLASSIFI ED 

UNCLASSIFIED 





UNCLASSIFIED fo2 

NON-RECORD fe6 

b7C 

b7E 

Thanks, will recheck it. 


— Original Message — 

From: I t oTDI (FBI) 

Sent: Friday. July ?1 . 7006 12:4 6 PM 

TO! I IHNI CFBII 

Subject ' RE: D&366o 1 

UNCLASSIFIED 

NON-RECORD 



UNCLASSIFIED 

NON-RECORD 




From: 

Sent: 

To: 

Subject: 


J(HN) (FBI) 
£pm 

_](OTD) (FBI) 


'Kb: UCtJSOOD 


UNCLASSIFIED 

NON-RECORD 


toe 

b7C 


Case agent wants the pen data to be there as this will be going to a Till. We are setting everything up the CDC side in VB 
to have it accessible for them. 

I will revie w the connections as you mentioned. 


— Original JfeSSMe=r.-. — 
From: I 

Sent: Friday. Inlv 71 

Subject: DCS3U0l!) 

UNCLASSIFIED 

NON-RECORD 


3(0TD) (FBI) 
2:49 PM 
](HN) (FBI) 



I’m curious why you’re setting up a pen-register line on the VB. 


-Oriaina 


ZZJ (OTD)IEE 
JCHN)(FBI)4_ 


JIN) (FBI) 


UNCLASSIFIED 

NON-RECORD 


bl 

fo2 

be 

b7C 

lb7E 


(s> r 


Have been setting up a pen register for 


line in VoiceBox III, vs. 3.6. and in the DC! 


:ing in the _DCS_30_0_0_but for some reason VB does not have access to the DCS3000. JSlI 


avail. Never had this problem previously, only since we have upgraded VB to 3.6 earlier this year. As far as I 
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• JESSE , 9 

know no, IP addresses have not changed. Any guidance on how to work this is appreciated. 



TTA Honolulu Division 
80d besk 

803 tell 


UNCLASSIFIED 

NON-RECORD 



Have been setting up a pen register for s j | ine in VoiceBox III, vs. 3.6. and in t he DC 
in the DCS300Q but for some reason VB ooes_not have access to the PCS300Q. JSlI 


previously, only since we have upgraded VB to 3.6 earlier this year. As far as I know nol 
Any guidance on how to work this is appreciated. ^ 


s have not changed. 
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Ilotdxfbi) 


From: ' THOMAS, MARCUS C. (OTD) (FBI) 

Sent: .Etiflay., August IS, 2QP§ 1 1,-37 AM 

T& Clifford, michael 

Subject: RE: Post Cut Through Digits 


l (QTD) (FBI); 
J(65C) (FBI) 


u ncl assified 

NON-RECORD 

Thanks l I 
Great information, 
met 


foe 

b7C 


Original Megaon 

From: I h rrm (FBI) 

Sent Pririav Ai,nM<fr»I. TMIfiinr-WAM 

To: I I (OTD) (FBI); CUFFORD, MICHAEL (OTD) (FBI)I l)GC) (FBI); 

THOMAS, MARCUS C. (OTD) (FBI) 1 1 

Subject: Post Cut Through Digits 

UNCLASSIFIED 

NON-RECORD 


Gentlemen, 

I checked all 56 field office's criminal pen-register DCS-3000 systems for post cut through dialed digit information. 

The attached spreadsheet list the field office and the observed data for the office. Rather than counting all targets with 
and without the dialed digit extraction option set I categorized the data as All, Most, Some, Few, and None. All means 


all targets in the system are currently set to collect post cut through digits. A ranking of Fe w means the majority of the 
targets are set with the option turned off. For example, WFO was ranked Few because onli leurrent targets 

were set to collect post cut through digits. 1 1 

A summary of the results: fo2 

. . foe 

Field offices with All targets set:! I foie 

Field offices with Most targets set: I I fo i e 

Field offices with Some targets setl 
Field offices with Few targets s et- I I 
Field offices with No targets set| | 



« File: Post Cut Thru.xls » 


UNCLASSIFIED. 

UNCLASSIFIED 


487 



From: 


Sent: 

To: 

Subject: 


RE: VPN Van Integration 


UNCLASSIFIED 

NON-RECORD 


n 


b2 

be 

fc7C 

b7E 


Thanks l ~1 
Yesterday. I was 


Thanks for all of your help!! 

I'll keep testing the DCS1020 and let you know of the results. 

□ 

— Original Message — 

|OTD) (FBI) 

4:53 AM 

ZJA) (FBI) 

UNCLASSIFIED 
NON-RECORD 



I have not resolved th4_ 


problem yet. 


b7C 

b7E 


U NC LASSIFIED 

NON-RECORD 


He | | 


Thanks for your help, 


488 




I don't have a pen register for s | | with| 


I'll Keep you updated. 

I 

UNCLASSIFIED 

UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 

I 

From: 

Sent: 

To: 

Subject: 


ItOTD) (FS!) 


I l LA) (FBI) 

Tiiogrlaw ("Wnhor 1 ft 7 nn<;l 1 «PU 

Rt:: DCS 3bb0 blient fc j r< : ?TPHF B 


UNCLASSIFIED 

NON-RECORD 


win we be able to get a DCS 3000 Client requested? 

If so can you give me a heads up when it'll be sent, so I can keep i 


— original Message— 


490 



Jso as of right now, I’m not sure if it works. 


fo2 

fo6 

fo7C 

b7E 




9 

Subject: DCS 3000 Client for Long Beach 


SEBBFi] 


V 


UNCLASSIFIED 

NON-RECORD 


I am writing to request a DCS 3000 Client for Long Beach RA. It will be located approximately 80 feet from the LBRA 
CMP. 

Please ship it directly to Long Beach RA at: 

FBI. 1 

_L 




b7C 

fo7E 


When it arrives I will receive it in PMA for inventory purposes. 
Thanks f or all youdieln— _ 
ill: 31 0| | 


UNCLASSIFIED 

UNCLASSIFIED 


[OTP) (FBI) 




to test) a system undergoing C&A until certain project milestones have been achieved... and 
you aren’t there yet. Hope this helps. 



h2 

he 

hi'C 

fo7E 


UNCLASSIFIED 

NON-RECORD 






With all this being said do we have the 


blessing to continue on with this testing in current status or do we need to include some encryption? 


ss d I 

PROGRAM MNGR. WITT 
ITD. ATU. DIV ISION 18 
703 ] \ >ffice 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 
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l(OTO) (FBI) 


From: 

Sent: 

To: 

Cc: 

Subject: 


FW: Weekly Report to AD Haynes and EAD Ashley 


UNCLASSIFIED 

NON-RECORD 


l t asked me to look at the text below. I do have some suggestions for modifying it to clarify a couple of 

points. Below is my amended 
version. Integrate it if it makes sense. 



fo2 
lb 6 
b7C 
b7E 


"The Switch Based Intercept Team (SBIT) is working with the FBI's Security Di vision to gain its authorization whic h will 
allow SBIT to introduce a new in vestigative tnnl to the field involving pushing i I provided 

via a CALEA Pen Registe r with I In Lit to the end user - the field and/or surve illance agent. This 

will be done by utilizing thel * | a vailable within DCS-3000 data, co upl ed withl I 

_ l The i l ana 

|sre already utilizing FBI software to accomplish this for their agencies, with 
ravarabte results, &tte£livdy BSing "6u! in front' of the FBI in utilizing this technology. If granted authorization by the FBI’s 
Security Division, SBIT can deploy this important and useful investigative tool to FBI Agents in the field." 

O riginal Message- — 

From l l flTDI (FBI) 

Se nt: Monday, October 18, 2004 2:11 PM 

tq J 1 (rTD)(com 

cc i H Tttd) (fbi) | I (rro) (fbi) 

Subject: RE: Weekly Report to AD Haynes and EAD Ashley 


UNCLASSIFIED 

NO N-RECORD 


The Switch Based Intercept Team (SBIT) is working with the FBI’s Security Division to gain its authorization which w ill 
allow SBIT to introduce a new investigative tool to the field, inv olving pushingf 4 *"- 

field and/or surveillance agent This will be done by utilizing the 


I -the 

Zlvallable within DCS-SOOO 


SmrTBWTnsiragSTOSSrVn | alread ^ utilizin 9 FBI software to 

technology. If granted authorization by the FBI's Security Division, SBIT can deploy this important and useful investigative 
tool to FBI Agents in the field. 


Supervisory Special Agent 

Telecommunications Intercept and Collection Technology Unit (TICTU) 
Electronic Surveillance Technology Section 
Investigative Technology Division 


bz 

bo 

b7C 

b7E 


— Original Message — 


From: 

Sent: 

To: 

Cc: 

Subject: 


J(OTD) (FBI) 
r 19, 2006 PM 


uer i zuuo 

Jl2TDHFBI);L 




JFBI);| _ 

](OTDHFBli 


IH](OTD)(CON 
J(OTD) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


O p o 

Attached is a quick slide for the DCS3000. Do you think a graphic would be better than listing all the application 
names? 



DCS30Q0.ppt (211 
KB) 


SENSITIVE BUT UNCLASSIFIED 




| KOTDHFB1) 


From: 

1 1 (OTD) (FBI) 



Wfirinfisriflv Almost PS POOR 10-SS AM 


To: 



Cc: 

1 — K6WWTBI1 

|(OTD) (FBI);| I 


■(um)Tf-Hrj 


Subject: 

USCG DCS 



SENSITIVE BUTJJNCLASSIFIED 

NO N-RE C OR D. 


I sent! it the! la copy of the DCS3000 install software. They are pursuing an intercept on a 

target L— T ___ « « 

and req uire the DCS 3000 software suite to accomplish this. She is being assisted bv l c fthel In networking 

issues ! I has used the DCS with this carrier before and I hope will be assiting her in configuration ilflte they 
are both out ot Miami. 

1=1 


SENSITIVE BUT UNCLASSIFIED 

|(OTP) (FBI) 

From: I l oTDI (FBI) 

Sent: Monday. August 14, 2006 12: 11 PM 

To: I > TD) (FBI) 

Subject: t-W: Not a survey 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Were you aware of this request? 


— Original 

From! 

Sent: 




3'F) (FBI) 




1.2006 9:37 AtS_ 
J(OTD) (FBI)| 


]0TD) (FBl£ 


JOTD) (f 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


fo6 

blC 


Hey guys!! Could one of you please respond toj 
Ele cfronics Tec toiclan IS-2 


!-mali? We are not quite sure what he is asking for. 


— Original Mp«anp — 

From: I fW F) (FBI) 


497 


b6 

ib7C 


h2 

hlE 



498 


UNCLASSIFIED 

NON-RECORD 


I Ip lease forward to all TS/TA's for a response. 

Ladies and Gentlemen, 

Can everyone please send me a very short reponse on the practice your offices follows in the use of the DCS-3000. Do 
you ONLY capture the first string of numbers or do you use the toogle to capture ALL numbers. 

Since there are many options available to us on how much dialed information we collect we need to know what the norm is 
around the country. I understand that some of you will answer it is on a "case to case" basis, but l am just looking for the 
norm in your office. 

Thanks for your quick response. The legal guys need this information to talk to all the options the DCS-3000 allows. 

□ 

ssa I ~l 

Unit Chief 

Technical Personnel Development Unit 

O: 54(1 1 

C: 202| | 

UNCLASSIFIED 

UNCLASSIFIED 

UNCLAS SIFIED 

UNCLASSIFIED 

SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 



From: 

Sent: 

To: 


DTD) (FBI) 
5:07 PM _ 


[OTD) (FBI);! 


Cc: 

Subject: 


-IfOTDWFBIVI KffiCBHEBI) 

ROTD) (FBI) ~mn\ (FBI) 


Termination Attempt Messages with MIN 


SENSITIVE BUT UNCLASSIFIED 
NON-RE C ORD 


All, 

This is to recap the discussion/test that we did on the VB this morning. First, the problem statement: 




Throuahl fenalvsis. it is seen that the subseauerl^™ 





The DCS 3000 r.nrrpnnJ I This problem should be 

addressed with JSI for tne vb ana Kayineon ror in j | 1 


□ 


SENSITIVE BUT UNCLASSIFIED 

I IfOTD) (FBI) 


From: 

Sent: 

To: 

Subject: 



(OTD) (FBI) 

S_L05 pm 

_J(OTD) (FBI) 


be 

b7C 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


FYI 


Z| (OTD) (FBI);| 
J(HN) (FBI) *- 


^OTD) (FBI) 


NON-RECORD 






I will be gone this afternoon but I should be here the rest of the weetd 


My new number is 703] 


Let us know if you need anymore help. 


UNCLASSIFIED 

NON-RECORD 


l(HN) (FBI) 

Qfi 11:04 PM 
J(OTD) (FBI) 


Did you want to jump into the ) | 

] If not email me instructions on how you want mis done and 


We would like to have this set up for testing prior to us getting thJ 
Wednesday so we can just connect the lines and have ! n est 
| J we need a particular type 


L from the Telco on 
md we will need 
1 Email me any instructions how 


Can you provide us some info on the function of the GR3Q? O n the GR30 it was labeled DCS3000. Is this a 
different configuration DCS3000 to handle thej | If not, could we not use the existing DCS3000? 



C Mr 


Any backgroun info is appreciated. 


not here anrtl Hand | are putting this together. 


I D TP) (FBI) 

Tuesday, June 20. 200 6 3:44 PM 
■ " ' hSF) (FBI) 

I IfOTD) (FBI);[ 

RE: 9.6 CDC 


to now the phone number service is set up an 

it is SBC. Let me know if you want me to be in on any calls with them. It is a learning experience on some of these 

applications 

of CALEA to hardlines. 


— Original Message — 

From: I I SFl (FBI) 

Sent; ^ Tuesday, June 20, 20 06 2; 10 PM 

To; I IfOTD) (FBI) 

Subject: 1 F W-TS TBC 1 

UNCLASSIFIED 

NON-RECORD 




i « i I tried plugging | [ rom the TSU600 in the new router yo u sent (routerlQ2), bu t didn't collect anything. Any 
\ D } enlightenment fanT31T provide will be greatly appreciated. | | Thanks! 


UNCLASSIFIED 


bl 

b2 

b6 

b7c 

b7E 


UNCLASSIFIED 


504 







WMMt 


ju w rrro s ! 


From: 

Sent: 

To: 

Subject: 


[ 

[ 

FW: Power outage and the DCS 300 


UNCLASSIFIED 

NON-RECORD 


be 

fo7C 



UNCLASSIFIED 

NON-RECORD 


[ 


Sorry I didn't inform you earlier. 

There are 2 planned days of power outages for the 3rd floor atWFO which will affect the DCS 3000. 
They are March 1 , and 2. It will start about 6pm and go until possibly 6am. 


J :ommunications Specialist 
(4pm- 12am) 


UNCLASSIFIED 


UNCLASSIFIED . 
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lOTD) (FBI) 
CLiODS 5:14 PM 
[(O TP) (FBI) 
(JMMuCS 3000 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


— -Original Mess age — 

From: | | HO) (FBI) 

Sent: Monday. December id' 2005 12:42 PM 

To: I (OTD) (FBI) 

Cc: | M (FBI) 

Subject: Another icon for CMP DCS 3000 

SENSITjV E B UT UNCLASSIFIED 
NON-RECORD 


Would it be possible for you to c reate another icon for a new FISA tc 
same manner as we download | 

It would make life easier for our i s ancf the weekend tech duty agent. 


SENSITIVE BUT UNCLASSIFIED 


§ENSjJIVE_BUT_UNCLASSlFIED_ 



We have to write up weekly accomplishments for the Director’s report and feed back like this is greatly appreciated. If 
you have 

any more details that we could put in our write up about how we may have helped that would be awesome. I unfortunately 





Electronics Engineer 
SBIT/TICTU 



fcs 

b7C 


UNCLASSIFIED 



Thank you and great job. The guy they picked up in CT through info provided by the DCS-3000 system is the 
suspect in a double homicide which occurred in northern VT a couple of days ago. You helped save a lot of agencies 
a lot of money and man-hours and, most importantly, you helped take a bad guy off the street. Thanks again. 



UNCLASSIFIED 

UNCLASSIFIED 




508 



From: 

Sent: 

To: 

Subject: 


I l (QTD) (FBI) 

JJaiU id an. U£ m. *,J44AM 

I I(OTD) (FBI) 


FW: DCSPC format 



DCSPC.txt (4 KB) 


UNCLASSIFIED 

NON-RECORD 


— O riginal Message — lb 7 c 

From: ! I f OTP) ( FBI) 

Se nt; Friday. June 03. 200 5 6:28 PM 
To: l r rroD) (fbi) 

Subject: DCSPC format 


UNCLASSIFIED 

NON-RECORD 


iched is the DCS 3000 output specifications for the DCSPC header. 


□ 


UNCLASSIFIED 


UNCLASSIFIED 


509 


a 


_- S E srce y — 

]pTO)(FBI) 


Sent: 

To: 

Cc: 


Subject: 


llTD> (FBI) 

Jsa^vJfewoMrOS, 2004 
ITDHFBn 


~lnTm /FRi\-r 


tcsfC 


jnTincnC 


RE: Important: FW: DOJ Accomplishments Project: 
COB Friday, 11/05/04) 


□( I IUHUJN) 


Tnsr 


Deadline: 1 1/8/04 (ESTS Deadline: 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Hello Guys, 

I sincerely hope that I did not leave anyone out of this e-mail who participated in this task. I wanted to express my 
personal appreciation for a job well done in completing this assignment. From all of the e-mail traffic, I can see that this 
goes all the way up to the EAD FBI and on to the Department of Justice. It takes a strong dedicated team to accomplish 
task after task without complaint. )*m proud to be a part of such a great group of men and women dedicated to the cause. 
Thanks for holding the line and standing in the gap in my absence. I look forward to getting back and rolling up my 
sleeves! 


Again great job as we move towards raising the bar up to the next level! 

1=1 



04, 2004 12:00 PM 
I) (FBI) 

(ITD) (FBI) 

int: FW: DOJ Accomplishments Project: Deadline: 11/8/04 (EST5 Deadline: COB Friday, 


fo6 

fo7C 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


I 1 

This is the DCS-5000 & DCS-6000 programs response: 


VOICEBOX. All Field Offices and a number of RA's have increased their abilities in Title III 
intercept collections by the implementation of digital, computer based collection platforms. During 
this time telecommunication intercepts have migrated from tape based audio recordings with 
manual cataloging of related data and documents to a Microsoft Windows based system that 
enables the audio, data and documents to be captured together and stored within a relational 
database. This configuration allows for easy retrieval and analysis of the information which 
enhances the ability of case agents to perform their duties efficiently and effectively. The DCS- 
6000 program has also been able to accommodate many smaller RAs and joint task force 

510 


w — pesq- w 

operations with a portable collection systems. WithtKTs portable system the RAs are able to 
move the collection and monitoring of the T-Ill operations to a facility that can better suit their 
needs. The usability of VoiceBox is applauded by the personnel using it throughout the 
organization. Since 2001, 68 systems have been deployed to the field. 


b2 

fc'7E 


ONE WAY PUSH. Prior to the development of the One Way P ush system vital CALEA data 
could not be imported directly from the DCS -3QQQ system s into I H ue to the security 

constraints of the DCS-3000. Consequently ] I vas not fully CALEA capable. The One 

Way Push meets security challenges head-on through an architecture that employs a “low” and 
"high" side server, connected by a one-way serial c onnection. W hen installed, the One Way Push 
allows for the full integration of CALEA data into the| Exponentially increasing its 

capability. ~" 


WORK FLOW MANAGER. Work Flow Manager is capable of providing critical management 
information to Language Services personnel and case managers throughout the FISA collection 
community. Work Flow Manager implements the ability to monitor and provide reporting for all 
audio sessions received, transferred, transcribed, and stored. Additional effort is being applied to 
Work Flow Manager in order to satisfy Language Services requirements for enhanced statistics 
and information reporting. 


supervisory special Agent 
Telecommunications Intercept and 
Col lection Techn ology Unit (TICTU) 


O riginal Message 

From] I(ITD) (FBI) 



(lease forward the information asked b} 
;d. Thanks. 


him^efore the 30th. Also, advise if additional assistance 



Subject: FW: LX-1 Presentation on 12/5/2005, on TTA abilities 


UNCLASSIFIED 

NON-RECORD 


This brief/EXPO which is requested by Counter-Terrorism is being pushed by the front office. 

I believe the DCS-5000, | | nd the DCS-3000 platform is what the division is interested ir 

Please advise and use| |as our point of contact. 


3 .S. | ~| let's put this on the agenda for Monday! 


— OriqjjjaJJ* 

From: ] |(OTD)(FBI) 

Sent: 1 1UKMW. WOWMB SHS. 2005 1:36 PM 
To: I I (OTP) (FBI) 

Subject: LX-1 Presentation on 12/5/2005, on TTA abilities 

UNCLASSIFIED 

NON-RECORD 


Afternoon | |here is the follow-up on our brief conversation this morning. As its stands right now OTD is 
scheduledTCTmake a presentation like the one made to/at FBIHQ in May of this year. If you could send me the 
name(s) of TICTU personnel that will be handling the TICTU table, I'll need their Name, DOB, SSAN, and Status 
(Agent v Support) by 1 1/30/2005. LX-1 Security likes to know who is carrying a gun in the bldg. Here is a simple 



Hopefully, I haven't missed any major item, if I did drop me a line. Thanks 
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UNCLASSIFIED 


UNCLASSIFIED 



Subject: FW: LX-1 Presentation on 12/5/2005, on TTA abilities 


UNCLASSIFIED 

NON-RECORD 

Hello Guys, 

This brief/EXPO which is requested by Counter-Terrorism is being pushed by the front office. 

I believe the DCS-5000. 1 l and the DCS-3000 platform is what the division is interested in. 

Please advise and us d la s our point of contact. 

let’s put this on the agenda for Monday! 



fo2 

foe 

fc7C 


fo7E 


— Original Mess age- — 

From: I l (OTD)fFBI) 

Sent: ~ inesnav iMnvpm hpr 15. 2005 1:36 PM 

To: I I (OTD) (FBI) 

Subject: LX-1 Presentation on 12/5/2005, on TTA abilities 


UNCLASSIFIED 




Afternoor j [ ere is the follow-up on our brief conversation this morning. As its stands right now OTD is scheduled to 
make a presentation like the one made to/at FBIHQ in May of this year. If you could send me the name(s) of TICTU 
personnel that will be handling the TICTU table, I'll need their Name, DOB, SSAN, and Status (Agent v Support) by 
1 1/30/2005. LX-1 Security likes to know who is carrying a gun in the bldg. Here is a simple set of driving instructions from 



Hopefully, I haven't missed any major item, if I did drop me a line. Thanks 


517 




Thanks for your help last week on our kidnapping matter (305B matter). It was resolved in the 
best possible fashion. Subje ct arrested and ch ild returned to her parents. 

By way of background (fo| | the Mobile FBI offi ce w as requested by the Mobile 

Police Depart ment (MPD) to assist them in tracking and l ocating d |t/ ear old male subject who had 
| ^ear old female over the internet to meet him | [ The girl met the subject willingly 

1 and hid bSfin missing for ten days before the FBI was called. The MPD became concerned about 
the safety for the child after conducting search warrant s and interviewing the subject w ho refused a 
polygraph. These concerns were compounded when a l { surmised that 

the subject would when caught kill the child and himself rather than face prosecution. 

FBI-Mobile became involved in this matter Thursday night and obtained tracking orders for the girls 
cell phone and the target's on Friday morning. Pen registers were initiated and Mobile TTAs began 
working with the cellular providers to attempt to locate the phones so mobile tracking equipment 
could be deployed. i i . . 

A request was made by Mobile TTAs for help from | [egarding the I brogram 

on the DCS 3000 system. I I vour assistance in remotely loading this program, ydur 1 patience in 
showing us how to use it and your dedication for staying well after what I am sure was the end of 
your workday is much appreciated. This program allowed us to follow the target as he traveled thru 
three states (Alabama, Mississippi and Louisiana) and allowed us to accurately predict where the 
target was headed so that local authorities could conduct a thorough search for the target vehicle. 

At 2:00 am the target's vehicle was located outside a hotel in Slidell, Louisiana. While FBI 
personnel were responding, the target somehow became alerted to law enforcement presence and 
attempted suicide by cutting his wrist. Medical assistance was obtained by the locals for the target 
and he was arrested The vounn girl was recovered without any further harm. The tar get was 
arrested on charges | | (the girl was younger that the legal age of consent)] f 

I l and willmost likely face federal charges involving the interneT 1 

Thanks again for your assistance, patience and long hours that you worked on Friday evening. 
Your assistance was most helpful to us and allowed for the best possible resolution of this matter.... 

* M0B16 DIVISION— ^ 

TECHNICAL ADVISOR 
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DESK-1 

CELL- 


foo 

b7C 


UNCLASSIFIED 


| OTD) (FBI) 

From: I I *) (FBI) 

Sent: Wednesday. June 21 .2006 7:28 PM 

To: I _] (OTD) (FBI) 

Subject: Kfc: vuip PtN UAI A l-KOM DCS 3000 


SECRET//NOFORN 
RECORD 315 


Cablevision. b6 

b7C 

Original MaccariP 

From: I I (OTP) (FBI) 

Sent: ■ WarlnaglaM-JuM: h, jW6 5:48 PM 

To: 1 b v) (FBI) 

Subject: RE: VOIP PEN DATA FROM DCS 3000 

SECRET//NOFORN 
RECORD 31S 


Do you know the carrier for this number? 

1=1 


From: | |(NY) (FBI) 

Sent: Wedne^v. TOhe 21. 200 6 4:13 PM 

To: I kOTD) (FBI) 

Subject! VOIP PEN DATA FROM DCS 3000 

SECRET//NOFORN 
RECORD 315 


be 

b7C 


C 


Hey | | 

Sorry to bother you butr 

roo j 


LsarttafiLmuC 


I b2 

b7E 



SECRET//NOFORN 
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DERIVED FROM: G-3 FBI Classification GuldeG-3. dated 1/97. Foreign Counterintelligence Investigations 


DECLASSIFICATION EXEMPTION 5 
SECRET//NOFORN 


DERIVED FROM: G-3 FBI Classification Guide G-3. dated 1/97. Foreign Counterintelligence Investigations 


BLACKARD, KENNETH L. (OTP) (FBI 



F) (FBI) 
Q0fi-a2:12AM 
_JOTD) (FBI)[ 


UNCLASSIFIED 

NON-RECORD 


t c* \ We. had a power failure in our building that affected all of our collects 
■ s ' The D CS 3QQ0 came back lip, but one switch is not connecting in tb< 

,,M< 0 , , , , 

Can you take a look at this and notifv l \ l202 \ | oi£ 


handled on our side? 1 

Also - Could you take a quick look at our systems and verify everything else is working properly? 


, „ r VFXFBI) 

July ttS. 2006 4 :46 PM 

t OTD) (FBI) 

j modem 


UNCLASSIFIED 

NON-RECORD 


Than k you for your help on this. 
□ in contact with Allegiance. 

Sorry if I came in the middle of things. 






Subject: RE: DCS 3000 modem 


UNCLASSIFIED 

NON-RECORD 


[=□ 

202 l H is the number for the modem at Allegiance. The modem at this location is not answering, which is the 
reason the connection to Allegiance is down. We (WFO) need to contact Allegiance to seek assistance in restoring 
the connection. 


□ 



UNCLASSIFIED 

NON-RECORD 


Some of this information is third hand so it might be a little distorted. 


Jwf) (FBI) 


bl 
lb 2 
fos 
fo7C 
b7E 


This is what I was told: 

(S) 

iS) 

(S) 


This Is mv research: 


Can you look into this and determine what this modem was being used for? Is it still needed? Can we power it 
off?? 


for your help. 


UNCLASSIFIED 
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U N CLASSIFIED 


UNCLASSIFIED 



Can you look into this and determine what this modem was being used for? Is it still needed? Can we power it off?? 
^ Thank ^ ou for your help. 


UNCLASSIFIED 


IsgeRFff - 
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I 


JWF) (FBI) 

3a 10:28 PM _ 
J(OTD) (FBI)[ 


UNCLASSIFIED 

NON-RECORD 


We are getting the following error on one of our DCS 3000 clients! 


What does this mean and what can be done to correct it?? 


' ' ' l (OTD) (FBI) | I (OTP) (FBI) 

Vonage intormation/questions and a DCS 3000 question 


UNCLASSIFIED 

NON-RECORD 


A couple of questions - , 

Do you have any recommendations for i I 

Do you know if/how other offices have handled this? 

I n oticed you d on't have a contact fol h ttlfiJ 

that! Icalled: 1Z2\ pn3 spoke tq 


IU website and was not sure if you had one. This is the number 
Ithe spelling might be off). I hope this might help you. 


I looked through the manuals for the DCS 3000 and could not find anything fc 
me in the past how to use it but I can't figure out how to put the number in the 
instruction on this? You can email it to me or if you want you can call and leal 


l lient I am sure you have shown 
:lient Can you give me som e 
a message 2021 1 





Thank you 
Dan 



le roiiowing problem was reported to us 03/10/06 



Thank you, 

Supervisory Tele communications Specialist 
l i ( 4Dm- 12am) 

I J 


UNCLASSIFIED 




From: 

Sent: 

To: 

. Subject: 


l====Z=l(WF) (FBI) 

■WftrinftSflav number 07, 2005 7- 15 PM 

I ... - _J(OTD) (FBI);| l(OTD) (FBI) 

DCS 3000 


UNCLASSIFIED 

NON-RECORD 


Hey guys - 

This is just a quick note to let you know they are doing more power interruptions at WFO this month. 

12/14/05 which will be our 4th floor (which should not affect the DCS at all) 

12/20/05 which will be our 3rd floor. (This will affect the DCS 3000). This will include the DCS and all of our modems and 
routers in the Criminal Plant area. We will be powering down the DCS 3000 between 5pm and 5:30 pm. And hopefully it 
will be back up before 10pm. 

If you need anything from us, or can give me any helpful advice, I would appreciate it. 

Thank you, 

Suge^risor^Telecommunications Specialist 
I I ( 4pm- 12am) 

202 l I 


UNCLASSIFIED 

I 


From: 

Sent: 

To: 

Subject: 


~l(OTD) (FBI) 


RE: DCS3000 


>) (FBI) 
^5 AM 
J(OTD) (FBI) 


Jb6 . 

b'/C 


UNCLASSIFIED 

NON-RECORD 


thanks 


— Original 

From: 

Sent 

To: 

Subject; 


Message 


I 

RE: DCS3000 


UNCLASSIFIED 

NON-RECORD 


]0TD) (FBI) 



□ 

I've been out of the office for the past two weeks. 1 will comply as soon as possible. 

□ 

S^ET] 


525 



© 


o 


Oriql 

From: P 
tent: *— 


Unal Message-- 


T:SecD) (FBI) 
704:05 PM 
"jOTD) (FBI) 


UNCLASSIFIED 

NON-RECORD 


Ken, 

You are the last one, what the status of your completed exercise document. 
Thanks . 

I t ] 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


From: 

Sent: 

To: 


Cc: 


Subject: 


UNCLASSIFIED 

NON-RECORD 


> TD >( FBI > 


I SecD) (FBI) 
) 700fi Q 7R AM 


(FBI)f 


li, 1(LD) fFBD.r 


15 AM 

" Bir l m&g a 




l(CJIS) (FBlI 


JCJIS) (FBI); I 


flsdkfbdL 


J (SecD)(FBI)[ 


(CJISliEBI) 


T 


(FBI); L 


_J(CJIS) (FBI) 


Contingency Exercise schedule for May 31 , 2006 


b2 

b 6 

b7C 

b7E 


All, 

We need to ‘have a contingency exercise tomorrow to test the following systems: 


DClT ' j ' O ' uJ 

FOISS 

LEO 

KCIC 

□ 

SACS 

WACS 


Thanks 


UNCLASSIFIED 


526 


]A/F) (FBI) 
1:27 AM 
[ITD) (FBI) 


sent: ...Friday, January 28. 2QP5 1 

To: I 

Subject: ceil i iming in DCbsuuu 


UNCLASSIFIED 

NON-RECORD 


Hi, 


Thanks for calling me back. 



fo2 

k>6 

fo7C 

b7E 


UNCLASSIFIED 

I bTDWFBI) 


From: 

Sent: 

To: 

Subject: Re: Fwd: West Coast Regional Conference 


Hi, 

Thanks I already was notified of the conference and they know that X am 
attending. I have already gotten calls and emails from most of the carriers 
that I talk to everyday to ask if I would be there as we are planning where we 
are having dinner each night. It is always about FOOD. 

They (ERF) have asked me to be a presenter at the conference on a case 
the shows the niRrit.fi Of t.tif! nr.fi ,10 00 and. Jpow it helped to solve a major case. 

It is really I I rho should get all the credit as they 

do all the work and make this all come together. One of the biggest cases 
that I worked on that brought a great media firrpnrirm fm-pnfn wt?rp rri vpn ■ , , 









SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 

| ~k>TP) (FBI) 

From: | | (ITD) (FBI) 

Sent: 1:49 PM , 

To: I I ITD^ (FBI) 

Subject: FW: Growing JTTF trend 


JlTD) (FBI) 


UNCLASSIFIED 

NON-RECORD 


Please see the forwarded e-mail below I I s referring to JTTF's that are not controlled/supervised by the FBI, but 

rather to JTTF's where the FBI is simply a participant. 


Supervisory Special Agent 

Telecommunications Intercept and Collection Technology Unit (TICTU) 

Electronic Surveillance Technology Section 

Investigative Technology Division 

QuantoiJSfl[flima 

7D 3I | 


— original Message--:--. 

From l r um (FBI) 

sent; Thursday. July, 29, 2004 6:47 pm . 

Td \(TTO) (FBI) . 

C d I OTP) (FBI) l j lTD) (FBI) 

Subject: Growing JTTF trend 


un c la ssified 

NON- R E C ORD 


FYI - From what I have been hearing from the field, there seems to be a growing trend that some JTTFs are purchasing 
their own VOICEBOX collection platforms, with or without DCS-3000 connectivity, and are looking to the FBI for assistanct 
in maintaining these systems. One would think that a maintenance contract would have been purchased at the same time 
but with limited state and local monies, I tend to doubt that. I believe now would be a good time for TICTU to 
begin discussions among ourselves as to how ITD would want to respond to the field in the event TTAs are committed to 
assist in this kind of situation. 


529 


b6 

b7C 


© SEtegeSi © 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


a riCTU personnel have asked that you specify what time period you are inquiring about, as well as defining what 
nsider IT to be. Are you asking about costs from the inception of projects that could date back years, or 
something else? Thanks. 


Il Agent 

Telecommunications Intercept and Collection Technology Unit (TICTU) 
Electronic Surveillance Technology Section 
Operational Technology Division 


Onqmal Message 

am: I l (OTD) (FBI) 

1 “ 1 U 2006 4:11 PM 


1= 


IfOTD'l 


Subject: IT Information Request - Needed^ by 


_J)TD) (FBI) 




‘^r 


I lITPj 

(fbi); 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Marcus Thomas has asked that we determine the cost of the IT portions of the OTD collection systems listed on 
the OCIO master list of systems, applications, databases, and networks. For the systems/projects listed below, 
please determine or estimate as best you can the cost of the hardware, software, and the development work for 
the interlace to the Trilogy network or other FBI IT infrastructure. This will help us separate the funding of National 
Security Systems that are not truly IT from IT systems, databases, applications and networks. Please provide an 
estimate by Friday 3/24. 


EDMS - IT Interface 
DCS 6000 - IT Interface 
DCS 3000 - IT Interface 
DCS Net (CALEA transport) 
CARTSAN - IT Interface 
CART Famil y of Systems 


central Monitoring Plant Network 

nP- e J. t C^l^P.Q.i. t PJj,0. ( LQ§ nt Systems Operations Center (CSOC) 


Thanks, 


I |PE, PMP 

tiectromes tngineer, program Management Office Manager 
ELSUR Management Technology Unit 
Electronic Surveillance T echnology Section, OTD 
Phone: 703* 1 

Cell: 


I^ZZl 


b2 

b6 

b7C 

b7E 


SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 


ft 

ft 


531 


IT Information Request - Needed by Friday 3/24 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Marcus Thomas has asked that we determine the cost of the IT portions of the OTD collection systems listed on the OCIO 
master list of systems, applications, databases, and networks. For the systems/projects listed below, please determine or 
estimate as best you can the cost of the hardware, software, and the development work for the interface to the Trilogy 
network or other FBI IT infrastructure. This will help us separate the funding of National Security Systems that are not truly 
IT from IT systems, databases, applications and networks. Please provide an estimate by Friday 3/24. 

EDMS - IT Interface 
DCS 6000 - IT Interface 
DCS 3000 - IT Interface 
DCSNet (CALEA transport) 

CARTSAN - IT Interface 
, CART Family of Systems 


faring Plant Network 
Central Monitoring Plant Systems Operations Center (CSOC) 


Thanks, 


I I PE, PMP 

Electronics Engineer. Program Management Office Manager 


ELSUR Management Technology Unit 
Electronic jSi “ " 

Phone: 7 
Cell: 


onic ^urve^lanm^ Teci^loav Section, OTD 


fob 

fo.7C 

fo7E 


SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 




| | Please assist l T ith a coordinated ri 

TTScessary. Thanks. 


1 Note deadline of 3/24/06. Reminders a 


Supervisory Special Agent 

Telecommunications Intercept and Collection Technology Unit (TICTU) 
Electronic Surveillance Technology Section 
Operational Technology Division 


— Original Messacj^-- 

From: 8*^*" 

Sent: ZEE 


IO TP) (FBI) 

Tnpvtov MnrrhTnnnfi4:iiPM „ 
I (otd) rraii 
^511 TSTm (FBiCI 

I T rrp) (FBi f 

r K not (fbi) |— 

IT Information Request - NeedecTEyTf 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


_^JOTD) fFBP l 

uiui I hE P ™ I r Tp^rarf 

] (OTD) (FBI) 


Marcus Thomas has asked that we determine the cost of the IT portions of the OTD collection systems listed on the OCIO 
master list of systems, applications, databases, and networks. For the systems/projects listed below, please determine or 
estimate as best you can the cost of the hardware, software, and the development work for the interface to the Trilogy 
network or other FBI IT infrastructure. This will help us separate the funding of National Security Systems that are not truly 
IT from IT systems, databases, applications and networks. Please provide an estimate by Friday 3/24. 

EDMS - IT Interface 
DCS 6000 -IT Interface 
DCS 3000 - IT Interface 
DCSNet (CALEA transport) 

CARTSAN - IT Interface 
CART Family of Systems 


iring Plant Network 

irinn Plant Systems Operations Center (CSOC) 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


